CVE-2021-40954

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

Privilege escalation

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954

Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code...

CVE-2021-40954

CVE-2021-40954 affects Laiketui 3.5.0. The connected documents confirm an arbitrary file upload vulnerability in Laiketui that can allow an attacker to execute arbitrary code. Affected component is the file upload mechanism within Laiketui 3.5.0; root cause specifics are not provided in the docum...

LaikeTui SQL注入漏洞

LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. A security vulnerability exists in LaikeTui v3.5.0. Attackers use this vulnerability through the menu management function in the background of the SQL injection attack , in order to obtain sensitive...

GHSA-4926-QPXG-6R3W Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

GHSA-C27H-MCMW-48HV vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Design/Logic Flaw

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...

CVE-2022-31263

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...

PT-2022-20651 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 3.5.0 Description: The issue allows a bypass of e-mail restrictions in the app/models/user.rb file. Recommendations: For versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue...

GHSA-CCQF-C5HQ-77MP Missing Authorization in Apache ZooKeeper

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...

AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

CVE-2020-15112 affecting package etcd for versions less than 3.5.0-3

CVE-2020-15112 affecting package etcd for versions less than 3.5.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-15114 affecting package etcd for versions less than 3.5.0-3

CVE-2020-15114 affecting package etcd for versions less than 3.5.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-15113 affecting package etcd for versions less than 3.5.0-3

CVE-2020-15113 affecting package etcd for versions less than 3.5.0-3. An upgraded version of the package is available that resolves this issue...

PT-2022-16447 · Unknown · Simple-Git

Name of the Vulnerable Software and Affected Versions: simple-git versions prior to 3.5.0 Description: The issue arises from an incomplete fix of a previous command injection vulnerability, which only addressed the git fetch attack vector. The --upload-pack feature of git, also supported for git...

AZL-45156 CVE-2022-0536 affecting package js-jquery 3.5.0-4

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

CVE-2022-0432

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0...

CVE-2022-0432

Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0...

PT-2022-13181 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 3.5.0 Description: The issue is related to Prototype Pollution in the GitHub repository mastodon/mastodon. Recommendations: For versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue...