Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an information disclosure vulnerability that is caused by incorrect authorization validation on dashboard and chart imports. An attacker could use this vulnerability ...

Apache Superset SQL注入漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit the vulnerability to...

SUSE CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

Helm dependency management path traversal

A Helm contributor discovered a path traversal vulnerability when Helm saves a chart including at download time. Impact When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected...

AZL-38023 CVE-2024-25620 affecting package helm for versions less than 3.13.2-3

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-34583 CVE-2024-25620 affecting package cert-manager for versions less than 1.12.12-2

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

AZL-34355 CVE-2024-25620 affecting package cert-manager for versions less than 1.11.2-12

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

UBUNTU-CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

PT-2024-4076

Name of the Vulnerable Software and Affected Versions Helm versions prior to 3.14.1 Description The issue is related to the Helm client or SDK saving a chart outside its expected directory based on changes in the relative path within the Chart.yaml file. This occurs when the chart's name includes...

CVE-2023-47526

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

CVE-2023-47526

CVE-2023-47526 is a stored XSS vulnerability in the WordPress plugin Chartify (Chart Builder) vulnerable in versions = 2.0.7 or apply vendor-provided patches. If upgrading is not feasible, monitor for official advisories and consider mitigating through plugin removal or disabling affected feature...

CVE-2023-47526: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart Plugin: from n/a through 2.0.6...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

Information disclosure

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611: Improper Limitation of a Pathname to a Restricted Directory

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

PT-2024-12817 · Softwarex · Software Fx Chart Fx 7

Name of the Vulnerable Software and Affected Versions: Software FX Chart FX 7 version 7.0.4962.20829 Description: The issue allows attackers to enumerate and read files from the local filesystem by sending crafted web requests. Recommendations: For Software FX Chart FX 7 version 7.0.4962.20829,...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611

The CVE-2023-39611 entry concerns Software FX Chart FX 7 (version 7.0.4962.20829). The vulnerability allows an attacker to enumerate and read files on the local filesystem by sending crafted web requests, indicating a local file disclosure issue in the web-facing functionality. The root cause and...

Software FX Chart FX Security Vulnerability

Software FX Chart FX is a data visualization library from Software FX that allows developers to create a variety of charts. A security vulnerability exists in Software FX Chart FX version 7 7.0.4962.20829, which originates from a vulnerability that allows an attacker to enumerate and read files o...