EUVD-2025-43794

Malicious code in jaja-moci15-sukiwir npm...

CVE-2025-43794

creationtimestamp| type| source ---|---|--- 2025-09-15 14:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyuykbaz5b2g...

CVE-2024-43794

creationtimestamp| type| source ---|---|--- 2024-08-23 19:38:37+00:00| seen| https://t.me/cvedetector/4017...

CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

CVE-2024-43794

CVE-2024-43794 affects the OpenSearch Dashboards Security Plugin, which adds a configuration management UI for OpenSearch Security features. The issue is improper validation of the nextUrl parameter, allowing external redirects on login for specially crafted inputs. A patch is available and recom...

Discourse 2.8.x < 2.8.0.beta9 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2021-43794

creationtimestamp| type| source ---|---|--- 2021-12-01 22:35:41+00:00| seen| https://t.me/cibsecurity/33227...

CVE-2021-43794 Anonymous user cache poisoning via development-mode header in Discourse

Discourse is an open source discussion platform. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown a JSON blob instead of the HTML page. This can lead to a partial denial-of-service. This issue is patched in the latest...

CVE-2021-43794

CVE-2021-43794 affects Discourse. An attacker can poison the cache for anonymous users, causing a JSON blob to be shown instead of HTML and enabling a partial DoS. Some sources attribute this to cache-poisoning via the development-mode header. The vulnerability is mitigated in the latest stable, ...

CVE-2022-43794

CVE-2022-43794 entry is rejected/not used and does not represent an active vulnerability entry.