6 matches found
CVE-2018-1000150
An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealmauthContext that allows attackers with local file system access to obtain a list of authorities for logged in users...
CVE-2018-1000150
CVE-2018-1000150 affects Jenkins' Reverse Proxy Auth Plugin
CVE-2017-1000150
CVE-2017-1000150 affects Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3. The root cause is that session IDs are not regenerated on login or logout, enabling session fixation. Impact is elevated risk of session hijacking for users of affected versions. Remediation: upgrade to Mahara 15.04.7 ...
CVE-2016-1000150
Reflected XSS in wordpress plugin simplified-content v1.0.0...
CVE-2016-1000150
Reflected XSS in wordpress plugin simplified-content v1.0.0...
CVE-2016-1000150
CVE-2016-1000150 describes a Reflected XSS in the WordPress plugin simplified-content v1.0.0 . The vulnerability affects the plugin’s input handling, allowing an attacker to inject arbitrary script via reflected content. Multiple connected sources corroborate this finding, with consistent descrip...