Security advisories

medium2024-05-27

silverstripe/framework has Cross-site Scripting vulnerability in page history comparison

silverstripe/silverstripe-framework · GHSA-c4c3-j73v-634r

medium2024-05-27

silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage

silverstripe/silverstripe-framework · GHSA-pp7q-6j3f-74vj

medium2024-05-27

silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL

silverstripe/silverstripe-framework · GHSA-r85g-7jpv-8xrx

medium2024-05-27

silverstripe/framework has Cross-site Scripting vulnerability in page name

silverstripe/silverstripe-framework · GHSA-hhvj-mcrx-3vcf

medium2024-05-27

silverstripe/framework member disclosure in login form

silverstripe/silverstripe-framework · GHSA-g84q-cq55-xwgp

medium2024-05-27

silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`

silverstripe/silverstripe-framework · GHSA-468j-6jrc-2rjx

medium2024-05-27

silverstripe/framework's `Member.Name` is not escaped

silverstripe/silverstripe-framework · GHSA-r9vp-fp72-xgf7

low2024-05-27

silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled

silverstripe/silverstripe-framework · GHSA-5r8w-66hq-rc39

medium2024-05-27

silverstripe/framework missing ACL on reports

silverstripe/silverstripe-framework · GHSA-52cx-hpc5-cxwc

medium2024-05-27

silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()`

silverstripe/silverstripe-framework · GHSA-p5h2-vr99-xm99

low2024-05-27

silverstripe/framework password encryption salt not updated

silverstripe/silverstripe-framework · GHSA-f3wp-xpv2-6vmg

medium2024-05-27

SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting

silverstripe/silverstripe-comments · GHSA-frm9-7pm9-5rgc

low2024-05-24

CVE-2024-35232-github.com/huandu/facebook may expose access_token in error message.

huandu/facebook · GHSA-3f65-m234-9mxr

high2024-05-24

CVE-2023-46442-Soot Infinite Loop vulnerability

soot-oss/soot · GHSA-hfg7-j82c-fr3w

medium2024-05-24

CVE-2024-22588-Kwik does not discard unused encryption keys

ptrd/kwik · GHSA-w8cp-frxc-55pj

low2024-05-24

CVE-2024-5273-Jenkins Report Info Plugin Path Traversal vulnerability

jenkinsci/report-info-plugin · GHSA-cw5r-jx8r-9f7x

medium2024-05-24

CVE-2024-5312-PHP Server Monitor vulnerable to Cross-site Scripting

phpservermon/phpservermon · GHSA-rq7f-j68f-mqh3

critical2024-05-24

CVE-2024-5315-Dolibarr vulnerable to SQL Injection

dolibarr/dolibarr · GHSA-q8x7-jc3h-p8xc

critical2024-05-24

CVE-2024-5314-Dolibarr vulnerable to SQL Injection

dolibarr/dolibarr · GHSA-c3h9-q3jx-w7fc

low2024-05-24

CVE-2023-1001-vxe-table Cross-site Scripting vulnerability

x-extends/vxe-table · GHSA-2qjp-fg8c-g878