14 matches found
RockyLinux 8 : javapackages-tools:201801 (RLSA-2026:41948)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:41948 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...
CVE-2026-41948
creationtimestamp| type| source ---|---|--- 2026-05-19 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116599359441666989 2026-05-19 11:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116601058386037204 2026-05-31 11:02:08+00:00| seen|...
CVE-2026-41948
Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencod...
EUVD-2025-41948
Malicious code in sari-sambel16-sukiwir npm...
CVE-2023-41948
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...
CVE-2022-41948
DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subject to a privilege escalation vulnerability. A DHIS2 user with authority to manage users can assign superuser privileges to themself by manually crafting an...
CVE-2023-41948
CVE-2023-41948 refers to a Stored XSS vulnerability in the WordPress plugin Cookie Notice & Consent, affecting versions
WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
Software Cookie Notice & Consent Type Plugin Vulnerable versions = 1.6.0 Fixed in 1.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41948 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 6a22d5557bd2 Credits DoYeon Park p6rkdoye0n Require...
CVE-2022-41948
creationtimestamp| type| source ---|---|--- 2022-12-09 02:12:54+00:00| seen| https://t.me/cibsecurity/54211...
CVE-2022-41948 Privilege Chaining with the user admin role in dhis2-core
DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subject to a privilege escalation vulnerability. A DHIS2 user with authority to manage users can assign superuser privileges to themself by manually crafting an...
CVE-2022-41948
CVE-2022-41948 describes a privilege-escalation in DHIS 2 core where a user with authority to manage users can self-assign superuser privileges by crafting an HTTP PUT request. The root cause is improper handling of user-management authority that allows self-elevation if the attacker is authentic...
CVE-2021-41948
creationtimestamp| type| source ---|---|--- 2022-04-29 18:24:29+00:00| seen| https://t.me/cibsecurity/41657...