15061 matches found
CVE-2023-29453
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
CVE-2023-29453 Agent 2 package are built with Go version affected by CVE-2023-24538
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
CVE-2023-29453 Agent 2 package are built with Go version affected by CVE-2023-24538
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
CVE-2023-29453
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
Zabbix Code Injection Vulnerability
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in the Zabbix plugin Agent 2, which stems from the fact that Agent 2 packages are built using a version ...
CVE-2023-43661
Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...
Design/Logic Flaw
Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...
CVE-2023-43661
CVE-2023-43661 (Cachet) affects Cachet prior to the 2.4 branch, where the template functionality could let an attacker execute code on the server due to inadequate input filtration and an old Twig version. The issue is mitigated by a patch in the 2.4 branch (commit 6fb043e109d2a262ce3974e863c54e9...
CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...
CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...
CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch...
Github Cachet Injection Vulnerability
Github Cachet is a software application. An open source status page system. An injection vulnerability exists in versions of Cachet prior to 2.4 that stems from allowing users to execute arbitrary code during poor filtering and older twig versions via the Create Template feature...
PT-2023-28906 · Cachet +1 · Cachet +1
Name of the Vulnerable Software and Affected Versions: Cachet versions prior to 2.4 Description: A template functionality in Cachet allows users to create templates, which can lead to the execution of any code on the server due to bad filtration and an old twig version. This issue can be exploite...
CVE-2023-36711
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...
CVE-2023-36711
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability...
CVE-2023-36585
Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.
CVE-2023-36711 Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
...
CVE-2023-36711
Technical details about CVE-2023-36711 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.