Security advisories

medium2024-10-24

CVE-2024-46998-baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature

baserproject/basercms · GHSA-p3m2-mj3j-j49x

medium2024-10-24

CVE-2024-46996-baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

baserproject/basercms · GHSA-66jv-qrm3-vvfg

medium2024-10-24

CVE-2024-46995-baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request

baserproject/basercms · GHSA-mr7q-fv7j-jcgv

medium2024-10-24

CVE-2024-46994-baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature

baserproject/basercms · GHSA-wrjc-fmfq-w3jr

medium2024-10-24

CVE-2024-45031-Apache Syncope: Stored XSS in Console and Enduser

apache/syncope · GHSA-jmrf-85g8-x8xv

high2024-10-23

CVE-2024-48964-OS Command Injection in Snyk gradle plugin

snyk/snyk-gradle-plugin · GHSA-qqqw-gm93-qf6m

high2024-10-23

CVE-2024-48963-OS Command Injection in Snyk php plugin

snyk/snyk-php-plugin · GHSA-69f9-h8f9-7vjf

medium2024-10-23

CVE-2024-49756-In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.

ash-project/ash_postgres · GHSA-hf59-7rwq-785m

medium2024-10-23

CVE-2024-48652-camaleon_cms affected by cross site scripting

owen2345/camaleon-cms · GHSA-hhxg-rvc9-8726

high2024-10-22

CVE-2024-26272-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor

liferay/liferay-portal · GHSA-p63m-vmjr-wg37

high2024-10-22

CVE-2024-26273-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor

liferay/liferay-portal · GHSA-hmrx-6pr5-hpwj

critical2024-10-22

CVE-2024-8980-Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console

liferay/liferay-portal · GHSA-chj2-4vg7-hhg3

high2024-10-22

CVE-2024-26271-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget

liferay/liferay-portal · GHSA-6c4v-x9v2-rjm8

critical2024-10-22

CVE-2024-38002-Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions

liferay/liferay-portal · GHSA-3mfq-fp2f-vwqh

high2024-10-22

Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify

mermaid-js/mermaid · GHSA-m4gq-x24j-jpmf

high2024-10-22

curl_cffi bundles a version of libcurl affected by High Severity vulnerability

lexiforest/curl_cffi · GHSA-3vpc-4p9p-47hc

medium2024-10-22

CVE-2024-48929-Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out

umbraco/umbraco-cms · GHSA-wxw9-6pv9-c3xc

medium2024-10-22

CVE-2024-48927-Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice

umbraco/umbraco-cms · GHSA-5955-cwv4-h7qh

medium2024-10-22

CVE-2024-48926-Umbraco CMS logout page displayed before session expiration

umbraco/umbraco-cms · GHSA-fp6q-gccw-7qqm

low2024-10-22

CVE-2024-48925-Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API

umbraco/umbraco-cms · GHSA-4gp9-ff99-j6vj