Security Advisories | GitStock

medium2023-11-27

CVE-2023-32065-OroCommerce get-totals-for-checkout API endpoint returns unwanted data

oroinc/orocommerce · GHSA-88g2-xgh9-4ph2

medium2023-11-27

CVE-2023-32064-OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility

oroinc/orocommerce · GHSA-8gwj-68w6-7v6c

medium2023-11-27

CVE-2023-32063-OroCRMCallBundle has incorrect call view page visibility

oroinc/crm · GHSA-897w-jv7j-6r7g

medium2023-11-27

CVE-2023-32062-OroCalendarBundle has incorrect system calendar events visibility

oroinc/crm · GHSA-x2xm-p6vq-482g

high2023-11-27

CVE-2022-41951-OroPlatform vulnerable to path traversal during temporary file manipulations

oroinc/platform · GHSA-9v3j-4j64-p937

medium2023-11-27

CVE-2023-48713-Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

knative/serving · GHSA-qmvj-4qr9-v547

high2023-11-27

CVE-2023-49075-Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

pimcore/admin-ui-classic-bundle · GHSA-9wwg-r3c7-4vfg

medium2023-11-27

CVE-2023-49081-aiohttp's ClientSession is vulnerable to CRLF injection via version

aio-libs/aiohttp · GHSA-q3qx-c6g2-7pw2

medium2023-11-27

CVE-2023-49082-aiohttp's ClientSession is vulnerable to CRLF injection via method

aio-libs/aiohttp · GHSA-qvrw-v9rv-5rjx

medium2023-11-27

aiohttp has vulnerable dependency that is vulnerable to request smuggling

aio-libs/aiohttp · GHSA-pjjw-qhg8-p2p9

medium2023-11-27

Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year

esapi/esapi-java-legacy · GHSA-r68h-jhhj-9jvm

medium2023-11-27

Uptime Kuma Authenticated remote code execution via TailscalePing

louislam/uptime-kuma · GHSA-hfxh-rjv7-2369

medium2023-11-27

CVE-2023-43701-Apache Superset Cross-site Scripting vulnerability

apache/superset · GHSA-wq8q-99p5-xfrw

medium2023-11-27

CVE-2023-42501-Apache Superset has Incorrect Default Permissions

apache/superset · GHSA-vv65-fjfj-4736

medium2023-11-27

CVE-2023-49068-Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability

apache/dolphinscheduler · GHSA-c6cg-73p3-973h

medium2023-11-27

CVE-2023-6202-Mattermost Improper Access Control vulnerability

mattermost/mattermost · GHSA-85jj-c9jr-9jhx

medium2023-11-27

CVE-2023-48369-Mattermost Uncontrolled Resource Consumption vulnerability

mattermost/mattermost · GHSA-3487-3j7c-7gwj

medium2023-11-27

CVE-2023-45223-Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

mattermost/mattermost · GHSA-p5pr-vm3j-jxxf

medium2023-11-27

CVE-2023-43754-Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

mattermost/mattermost · GHSA-jjr7-372r-cx7x

medium2023-11-27

CVE-2023-47865-Mattermost Improper Access Control vulnerability

mattermost/mattermost · GHSA-jj46-9cgh-qmfx