Security Advisories | GitStock

high2022-06-25

Path traversal mitigation bypass in OctoRPKI

cloudflare/cfrpki · GHSA-3jhm-87m6-x959

high2022-06-25

CVE-2022-31101-BlockWishList SQL Injection vulnerability

prestashop/blockwishlist · GHSA-2jx3-5j9v-prpp

medium2022-06-25

CVE-2022-31077-CloudCore CSI Driver: Malicious response from KubeEdge can crash CSI Driver controller server

kubeedge/kubeedge · GHSA-x938-fvfw-7jh5

medium2022-06-25

CVE-2022-32209-Rails::Html::Sanitizer vulnerable to Cross-site Scripting

rails/rails-html-sanitizer · GHSA-pg8v-g4xq-hww9

low2022-06-25

CVE-2022-30120-Cross site scripting in Concrete CMS

concretecms/concretecms-core · GHSA-m2ww-6wv6-vw3c

critical2022-06-25

CVE-2022-30117-Path traversal in Concrete CMS

concretecms/concretecms-core · GHSA-3jxh-6635-6jwp

high2022-06-25

CVE-2022-21829-Code injection in concrete CMS

concretecms/concretecms-core · GHSA-6xc4-7fmm-65q2

medium2022-06-25

CVE-2022-33910-MantisBT XSS through crafted SVG documents in file_download.php

mantisbt/mantisbt · GHSA-qghg-v7xv-q98q

high2022-06-25

CVE-2022-21231-Prototype Pollution in deep-get-set

acstll/deep-get-set · GHSA-mjjj-6p43-vhhv

medium2022-06-24

CVE-2022-34208-Jenkins Beaker builder Plugin Missing Authorization vulnerability

jenkinsci/beaker-builder-plugin · GHSA-xfjq-5m4w-cc6h

medium2022-06-24

CVE-2022-34207-Cross-Site Request Forgery in Jenkins Beaker builder Plugin

jenkinsci/beaker-builder-plugin · GHSA-vqpp-q5x5-qj4r

medium2022-06-24

CVE-2022-34209-Cross-Site Request Forgery in Jenkins ThreadFix Plugin

jenkinsci/threadfix-plugin · GHSA-rq99-93c5-33f6

high2022-06-24

CVE-2022-34296-Query predicate bypass in Zalando Skipper

zalando/skipper · GHSA-qx2j-85q5-ffp8

medium2022-06-24

CVE-2022-34205-Cross-Site Request Forgery in Jenkins Jianliao Notification Plugin

jenkinsci/jianliao-plugin · GHSA-q8v3-7h6q-g39q

medium2022-06-24

CVE-2022-34298-NT auth module vulnerability in OpenAM

openidentityplatform/openam · GHSA-px3r-27qc-hx5g

medium2022-06-24

CVE-2022-34211-Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin

jenkinsci/vmware-vrealize-orchestrator-plugin · GHSA-c965-p3w4-835c

low2022-06-24

CVE-2022-34213-Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text

jenkinsci/squashtm-publisher-plugin · GHSA-9h79-5m2f-mqj2

high2022-06-24

CVE-2022-34198-Cross-site Scripting in Jenkins Stash Branch Parameter Plugin

jenkinsci/stash-branch-parameters-plugin · GHSA-88r9-hfj2-54hv

medium2022-06-24

CVE-2022-34210-Missing permission check in Jenkins ThreadFix Plugin

jenkinsci/threadfix-plugin · GHSA-77vq-4j66-46m5

medium2022-06-24

CVE-2022-34212-Missing permission check in Jenkins vRealize Orchestrator Plugin

jenkinsci/vmware-vrealize-orchestrator-plugin · GHSA-35r9-gfqf-r6cw