CVE-2021-27989

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

Cross site scripting

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

CVE-2021-27989

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

CVE-2021-27989

Appspace 6.2.4 is reported vulnerable to stored cross-site scripting (XSS) in multiple parameters of /medianet/sgcontentset.aspx. The CVE entry identifies the affected product and endpoint but does not publish exact root cause details or a formal fix version. A PoC repository is linked in referen...

CVE-2021-27670

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...

Server side request forgery (ssrf)

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...

CVE-2021-27670

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...

Appspace Code Issues Vulnerabilities

Appspace is an application from the US-based Appspace Inc. Provides built-in content policies to easily implement and execute team communication programs. A security vulnerability exists in Appspace 6.2.4, which stems from the api/v1/core/proxy/jsonprequest url parameter...

CVE-2021-27564

A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...

Cross site scripting

A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...

CVE-2021-27564

Summary (CVE-2021-27564): A stored XSS vulnerability affects Appspace 6.2.4. After an authenticated user submits an XSS payload in the groups section of the network tab, the payload is stored as the group name. When other members visit that group, the payload executes in their context. The availa...

CVE-2021-27564

A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...

Appspace 跨站脚本漏洞

Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...

Protect

FortiOS versions 6.2.4 and below...

CVE-2018-3824

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive...

Cross site scripting

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. Users with manageml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtain sensitive information from or perform destructiv...

Elasticsearch ESA-2018-10

In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the snapshot API. When the accesskey and securitykey parameters are set using the snapshot API they can be exposed as plain text by users able to query the snapshot API.Although it is advised in the 6.X snapshot API...

CVE-2017-14590

Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan that has a non-linked Mercurialrepository, create or edit a plan when there is at least one linked Mercuri...

MapServer WFS Feature Requests Buffer Overflow Vulnerability - Linux

MapServer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:osgeo:mapserver";...

Fedora 24 : mapserver (2017-f8094477ee)

Update to 6.2.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...