50 matches found
CVE-2022-29041
creationtimestamp| type| source ---|---|--- 2022-04-13 00:17:22+00:00| seen| https://t.me/cibsecurity/40695...
CVE-2022-29041
Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-29041
Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-29041
CVE-2022-29041 affects the Jenkins Jira Plugin. Versions 3.7 and earlier (except 3.6.1) fail to escape the names and descriptions of Jira Issue and Jira Release Version parameters on parameter views, causing a stored XSS vulnerability exploitable by users with Item/Configure permission. The issue...
CVE-2022-29041
Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2021-29041
CVE-2021-29041 is a DoS vulnerability in the Multi-Factor Authentication (MFA) module of Liferay DXP 7.3 prior to fix pack 1. The issue allows remote authenticated attackers to prevent any user from authenticating by (1) enabling TOTP on behalf of another user or (2) modifying the other user’s TO...
CVE-2021-29041
Denial-of-service DoS vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by 1 enabling Time-based One-time password TOTP on behalf of the other user or 2 modifying the other...
CVE-2020-29041
creationtimestamp| type| source ---|---|--- 2021-01-07 00:39:39+00:00| seen| https://t.me/cibsecurity/21720...
CVE-2020-29041
The CVE-2020-29041 entry describes a misconfiguration in Web-Sesame 2020.1.1.3375 where JavaScript source maps were included in production Webpack config, allowing an unauthenticated attacker to download the application’s source code and related artifacts (bundle sources, configuration settings s...