CVE-2024-41239

A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...

CVE-2024-41239

The CVE-2024-41239 entry describes a Stored Cross-Site Scripting (XSS) in Kashipara/Responsive School Management System v3.2.0, specifically in /smsa/add_class_submit.php, where the class_name parameter can be exploited to execute arbitrary code. Connected sources (NVD, Red Hat, CVE lists) consis...

CVE-2023-41239

Server-Side Request Forgery SSRF vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin by Blubrry: from n/a through 11.0.6...

CVE-2023-41239

PowerPress Plugin by Blubrry (CVE-2023-41239) is affected by an authenticated SSRF via the powerpress_media_info AJAX action. The issue affects PowerPress versions up to 11.0.6 and is mitigated by upgrading to 11.0.7. Exploitation requires at least Contributor-level access (Authenticated), with t...

CVE-2023-41239 WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin by Blubrry: from n/a through 11.0.6...

WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)

Software PowerPress Podcasting Type Plugin Vulnerable versions = 11.0.6 Fixed in 11.0.7 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-41239 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 7109111d9722 Credits Mika Required privileg...

SUSE CVE-2021-41239

Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user enumeration settings by the administrator. This allowed a user to enumerate other users on the instance, even when user listings where disabled. It...

CVE-2022-41239

creationtimestamp| type| source ---|---|--- 2022-09-21 20:41:30+00:00| seen| https://t.me/cibsecurity/50218...

CVE-2022-41239

Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-41239

Summary: CVE-2022-41239 affects the Jenkins DotCi Plugin (version ≤ 2.40.00). The issue is a lack of escaping the GitHub user name parameter in commit notifications when displayed in a build cause, which leads to a stored cross-site scripting (XSS) vulnerability. Affected component: Jenkins DotCi...

Security update for nextcloud (moderate)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2022:0098-1 Rating: moderate References: 1196905 1196908 1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

OPENSUSE-SU-2022:0089-1 Security update for nextcloud

This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 CWE-200: user enumeration setting not obeyed in User Status API boo1196905 - CVE-2021-41241 CWE-863: groupfolders advanced permissions is not obeyed for subfolders boo1196908 - CVE-2021-41741...

Security update for nextcloud (moderate)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2022:0089-1 Rating: moderate References: 1196905 1196908 1196952 Cross-References: CVE-2021-41239 CVE-2021-41241 CVE-2021-41741 CVSS scores: CVE-2021-41239 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

Nextcloud Server < 20.0.14, 21.x < 21.0.6, 22.x < 22.2.1 Multiple Vulnerabilities

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

CVE-2021-41239

CVE-2021-41239 affects Nextcloud Server. The issue arises when the User Status API does not respect the administrator’s user enumeration settings, allowing a user to enumerate other users on the instance even if listings are disabled. The vulnerability is described in multiple connected sources a...

CVE-2021-41239 User enumeration setting not respected in Nextcloud server

Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user enumeration settings by the administrator. This allowed a user to enumerate other users on the instance, even when user listings where disabled. It...