Security advisories

medium2023-06-20

CVE-2023-35167-When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id

View chart →

remult/remult · GHSA-7hh3-3x64-v2g9

critical2023-06-20

CVE-2023-35162-XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template

View chart →

xwiki/xwiki-platform · GHSA-q9hg-9qj2-mxf9

high2023-06-20

CVE-2023-35155-XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email

View chart →

xwiki/xwiki-platform · GHSA-fwwj-wg89-7h4c

critical2023-06-20

CVE-2023-35153-XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters

View chart →

xwiki/xwiki-platform · GHSA-4wc6-hqv9-qc97

critical2023-06-20

CVE-2023-35152-XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults

View chart →

xwiki/xwiki-platform · GHSA-rf8j-q39g-7xfm

high2023-06-20

CVE-2023-35151-XWiki Platform may show email addresses in clear in REST results

View chart →

xwiki/xwiki-platform · GHSA-8g9c-c9cm-9c56

critical2023-06-20

CVE-2023-35150-XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application

View chart →

xwiki/xwiki-platform · GHSA-6mf5-36v9-3h2w

high2023-06-20

CVE-2023-34467-XWiki Platform may retrieve email addresses of all users

View chart →

xwiki/xwiki-platform · GHSA-7vr7-cghh-ch63

medium2023-06-20

CVE-2023-34466-XWiki Platform's tags on non-viewable pages can be revealed to users

View chart →

xwiki/xwiki-platform · GHSA-7f2f-pcv3-j2r7

critical2023-06-20

CVE-2023-34465-XWiki Platform's Mail.MailConfig can be edited by any user with edit rights

View chart →

xwiki/xwiki-platform · GHSA-g75c-cjr6-39mc

critical2023-06-20

CVE-2023-34464-XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template

View chart →

xwiki/xwiki-platform · GHSA-fp7h-f9f5-x4q7

medium2023-06-20

CVE-2023-35163-Vega's validators able to submit duplicate transactions

View chart →

vegaprotocol/vega · GHSA-8rc9-vxjh-qjf2

medium2023-06-20

CVE-2023-34462-netty-handler SniHandler 16MB allocation

View chart →

netty/netty · GHSA-6mjq-h674-j845

critical2023-06-20

CVE-2020-21489-Liufee CMS File Upload vulnerability

View chart →

liufee/cms · GHSA-6vf2-mfmr-qqqw

critical2023-06-20

CVE-2023-34541-Langchain vulnerable to arbitrary code execution

View chart →

langchain-ai/langchain · GHSA-6643-h7h5-x9wh

medium2023-06-20

CVE-2020-21485-Alluxio Cross Site Scripting vulnerability

View chart →

alluxio/alluxio · GHSA-298m-hvgh-x9cw

critical2023-06-20

CVE-2020-21174-liufee CMS File Upload vulnerability

View chart →

liufee/cms · GHSA-q3q5-qvh5-cmw5

medium2023-06-20

CVE-2023-33495-Craft CMS vulnerable to HTML injection

View chart →

craftcms/cms · GHSA-m3v5-gjj9-rg24

medium2023-06-20

CVE-2020-21246-YiiCMS Cross Site Scripting vulnerability

View chart →

yongshengli/yiicms · GHSA-gqr4-cvf4-3957

medium2023-06-20

CVE-2020-20697-NodCMS Cross Site Scripting vulnerability

View chart →

khodakhah/nodcms · GHSA-7xqx-xwg9-jx34