Security Advisories | GitStock

medium2023-06-15

CVE-2023-29289-Magento Open Source allows XML Injection

magento/magento2 · GHSA-wh42-8r2w-873x

medium2023-06-15

CVE-2023-29290-Magento Open Source allows Incorrect Authorization

magento/magento2 · GHSA-qw5m-vmp3-f553

high2023-06-15

CVE-2023-29297-Magento Open Source allows Improper Neutralization of Special Elements Used

magento/magento2 · GHSA-gfmm-ww6f-5mm5

medium2023-06-15

CVE-2023-29288-Magento Open Source allows Incorrect Authorization

magento/magento2 · GHSA-f989-3fp9-q3r2

medium2023-06-15

CVE-2023-29287-Magento Open Source allows Information Exposure

magento/magento2 · GHSA-85m4-g9vq-xpxj

low2023-06-15

CVE-2023-29293-Magento Open Source affected by Improper Input Validation

magento/magento2 · GHSA-66c9-xrwj-9xv6

medium2023-06-15

CVE-2023-22248-Magento Open Source affected by Improper Input Validation

magento/magento2 · GHSA-5jfg-phx7-7fxg

medium2023-06-15

CVE-2023-29291-Magento Open Source allows Server-Side Request Forgery (SSRF)

magento/magento2 · GHSA-5f79-vhr4-vw2r

medium2023-06-15

CVE-2023-29292-Magento Open Source allows Server-Side Request Forgery (SSRF)

magento/magento2 · GHSA-4588-7x48-jrgj

low2023-06-15

CVE-2023-29296-Magento Open Source allows Incorrect Authorization

magento/magento2 · GHSA-3qr4-w96f-672v

low2023-06-15

CVE-2023-29295-Magento Open Source allows Incorrect Authorization

magento/magento2 · GHSA-354h-fpmq-68v7

low2023-06-15

CVE-2023-29294-Magento Open Source has Business Logic Errors Vulnerability

magento/magento2 · GHSA-28vp-39rf-3q2j

low2023-06-15

fast-xml-parser regex vulnerability patch could be improved from a safety perspective

naturalintelligence/fast-xml-parser · GHSA-gpv5-7x3g-ghjv

high2023-06-15

CVE-2023-34455-snappy-java's unchecked chunk length leads to DoS

xerial/snappy-java · GHSA-qcwq-55hx-v3vh

medium2023-06-15

CVE-2023-34454-snappy-java's Integer Overflow vulnerability in compress leads to DoS

xerial/snappy-java · GHSA-fjpj-2g6w-x25r

medium2023-06-15

CVE-2023-34453-snappy-java's Integer Overflow vulnerability in shuffle leads to DoS

xerial/snappy-java · GHSA-pqr6-cmr2-h8hf

high2023-06-15

CVE-2023-3276-HuTool XML parsing module has blind XXE vulnerability

dromara/hutool · GHSA-p2qf-9vp6-3jjq

medium2023-06-15

CVE-2023-3193-Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module

liferay/liferay-portal · GHSA-qxf6-mp24-52cv

high2023-06-15

CVE-2023-35030-Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module

liferay/liferay-portal · GHSA-p2fc-xxr8-fw3p

medium2023-06-15

CVE-2023-35029-Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module

liferay/liferay-portal · GHSA-22w7-m5f8-87vh