26 matches found
CVE-2023-43828
CVE-2023-43828 is a Cross-site Scripting (XSS) vulnerability in Subrion v4.2.1 located at /panel/languages/ that allows injecting crafted payloads into the Title parameter to execute arbitrary web scripts or HTML. The NVD entry lists a MEDIUM severity (CVSSv3.1: 5.4) with network attack vector, l...
CVE-2022-43828
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2021-43828
creationtimestamp| type| source ---|---|--- 2021-12-14 22:14:47+00:00| seen| https://t.me/cibsecurity/33974...
CVE-2021-43828 Improper Privilege Management in Patrowl
PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...
CVE-2021-43828
PatrOwl PatrowlManager contains an IDOR in versions prior to 1.77/1.7.7 that lets unauthenticated users download all finding import files. The files are stored in /media/imports//, with predictable owner_id and tmp_file formats (e.g., import__.json), enabling unauthorized access to the import fin...