Lucene search
+L

204 matches found

Positive Technologies
Positive Technologies
•added 2023/03/21 12:00 a.m.•16 views

PT-2023-17062 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue concerns Business Logic Errors in the GitHub repository answerdev/answer. Recommendations: For versions prior to 1.0.6, update to version 1.0.6 or later to resolve the issue...

6CVSS6.3AI score0.00644EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/21 12:00 a.m.•4 views

CVE-2023-1535: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...

8.3CVSS5.8AI score0.00536EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/03/21 12:00 a.m.•11 views

CVE-2023-1535 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...

8.3CVSS5.3AI score0.00536EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/21 12:00 a.m.•5 views

CVE-2023-1541: Undefined Security Weakness

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5.8AI score0.00644EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/03/21 12:00 a.m.•49 views

CVE-2023-1535 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...

8.3CVSS7.4AI score0.00536EPSS
SaveExploits1References4
Mend
Mend
•added 2023/03/21 12:00 a.m.•10 views

CVE-2023-1535

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...

8.7CVSS0.00536EPSS
SaveExploits1References6
CVE
CVE
•added 2023/03/21 12:00 a.m.•143 views

CVE-2023-1536

CVE-2023-1536 describes a stored Cross-site Scripting (XSS) vulnerability in the GitHub repository answerdev/answer for versions prior to 1.0.7 . The issue arises from user-supplied input being stored and subsequently reflected, enabling an attacker to execute script in an authenticated user’s co...

7.6CVSS6.7AI score0.00518EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/21 12:00 a.m.•5 views

CVE-2023-1538: Observable Timing Discrepancy

Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...

5.3CVSS5.8AI score0.00639EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/03/21 12:00 a.m.•15 views

PT-2023-17058 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Authentication Bypass by Capture-replay. This allows unauthorized access by reusing captured authentication data. There is no information provided about the estimat...

9.8CVSS5.6AI score0.00837EPSS
SaveExploits1References9
osv_ghsa
osv_ghsa
•added 2023/03/07 9:30 a.m.•28 views

GHSA-5W78-V688-CX9Q Answer vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.3AI score0.00553EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2023/03/07 9:30 a.m.•89 views

GHSA-VXHR-P2VP-7GF8 Answer vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...

4.8CVSS5AI score0.00526EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2023/03/07 9:30 a.m.•103 views

GHSA-55VM-3VQ3-4JPC Answer vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.4AI score0.0062EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/03/07 9:30 a.m.•42 views

Answer vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

9.3CVSS5.2AI score0.00519EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/03/07 8:15 a.m.•59 views

CVE-2023-1239

Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5AI score0.00526EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•50 views

CVE-2023-1241

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8.8CVSS5.6AI score0.0062EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•25 views

CVE-2023-1238

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

7.6CVSS5.5AI score0.00553EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•30 views

CVE-2023-1242

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.6AI score0.0062EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•67 views

CVE-2023-1243

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5AI score0.00526EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•53 views

CVE-2023-1240

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.6AI score0.0062EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•36 views

CVE-2023-1237

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS4.5AI score0.0044EPSS
SaveExploits1References2
Rows per page
Query Builder