Podatności

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is…

CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'args[link_target]' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters.

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, estimate, and recurring-invoice creation paths accept client-supplied total, sub_total, tax, discount_val, and…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edit and delete site languages without the granular Language, LanguageAdd, LanguageEdit or LanguageDelete permissions.…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with Dept or Self scope can call UserService…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE…

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.

CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the category_view role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can_access_skill check. Attackers holding the default skill:read permission can request GET…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_space_global objects on find/findOne,…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family members to bypass account sharing permissions. Authenticated members with read_only or no share can submit arbitrary entry_ids to modify other members'…

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or…

CVSS 5,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki