24 matches found
CVE-2022-23080
Directus CMS: CVE-2022-23080 affects Directus v9.0.0-beta.2 through 9.6.0, enabling SSRF in the media upload flow that lets a low-privilege user perform internal port scans. The connected advisories describe exploit scenarios (e.g., DNS rebinding attempts in file import) and confirm ongoing discu...
5CVSS5.4AI score0.00802EPSS
SaveExploits1References2Affected Software1
cyclebase.nl XSS vulnerability
Open Bug Bounty ID: OBB-636539 Description| Value ---|--- Affected Website:| cyclebase.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SaveExploits0
20