The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.Read More ...
Continue Reading
December 26, 2022
A vulnerability, which was classified as critical, has been found in json-pointer. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modi ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.Read More ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature.Read More ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.Read More ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.Read More ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.Read More ...
Continue Reading
December 26, 2022
OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages.Read More ...
Continue Reading
December 26, 2022
Back to Main
