8 matches found
CVE-2023-47390
Headscale through 0.22.3 writes bearer tokens to info-level logs...
CVE-2023-47390
Headscale through 0.22.3 writes bearer tokens to info-level logs...
Headscale Security Breach
Headscale is an application from the Dutch individual developer Juan Font that provides self-hosts and hobbyists with open source servers that can be used for their projects and labs. A security vulnerability exists in Headscale 0.22.3 and earlier versions, which stems from a token being entered...
PT-2023-30439 · Headscale · Headscale
Name of the Vulnerable Software and Affected Versions: Headscale versions through 0.22.3 Description: The issue allows Headscale to write bearer tokens to info-level logs. Recommendations: For versions through 0.22.3, consider restricting log access to minimize the risk of exploitation. At the...
PYSEC-2023-210
views.py in Wagtail CRX CodeRed Extensions formerly CodeRed CMS or coderedcms before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media...
PT-2023-12617 · Unknown · Wagtail Crx Codered Extensions
Name of the Vulnerable Software and Affected Versions: Wagtail CRX CodeRed Extensions versions prior to 0.22.3 Description: The issue allows upward protected/..%2f..%2f path traversal when serving protected media. This is due to a problem in views.py. Recommendations: For versions prior to 0.22.3...
Default CORS config allows any origin with credentials
Impact Origin reflection attack The default CORS configuration is vulnerable to an origin reflection attack. Take the following http4s app app, using the default CORS config, running at https://vulnerable.example.com: scala val routes: HttpRoutesF = HttpRoutes.of case req if req.pathInfo ===...
GHSA-52CF-226F-RHR6 Default CORS config allows any origin with credentials
Impact Origin reflection attack The default CORS configuration is vulnerable to an origin reflection attack. Take the following http4s app app, using the default CORS config, running at https://vulnerable.example.com: scala val routes: HttpRoutesF = HttpRoutes.of case req if req.pathInfo ===...