Lucene search
K

7 matches found

Nuclei
Nuclei
added 2 days ago20 views

Ametys CMS Information Disclosure

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...

5.3CVSS6.1AI score0.87164EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2026/01/09 10:43 a.m.6 views

CVE-2022-26159

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...

5.3CVSS7.1AI score0.87164EPSS
Exploits2References1
NVD
NVD
added 2022/02/28 4:15 a.m.8 views

CVE-2022-26159

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...

5.3CVSS0.87164EPSS
Exploits2References3
OSV
OSV
added 2022/02/28 4:15 a.m.0 views

CVE-2022-26159

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...

5.3CVSS5.8AI score0.87164EPSS
Exploits2References3
Prion
Prion
added 2022/02/28 4:15 a.m.13 views

Code injection

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...

5CVSS5.3AI score0.87164EPSS
Exploits2References3Affected Software1
CNNVD
CNNVD
added 2022/02/28 12:0 a.m.1 views

Ametys Cms 信息泄露漏洞

Ametys Cms is used to run large enterprise websites, blogs, Intranet and Extranet on the same server.Ametys Community Cms a free open source content management system written in Java. An information disclosure vulnerability exists in the Ametys CMS auto-completion plugins, which originated in the...

5.3CVSS5.9AI score0.87164EPSS
Exploits2References4
Positive Technologies
Positive Technologies
added 2022/02/28 12:0 a.m.3 views

PT-2022-17702 · Unknown · Ametys Cms

Name of the Vulnerable Software and Affected Versions: Ametys CMS versions prior to 4.5.0 Description: The auto-completion plugin in Ametys CMS allows a remote unauthenticated attacker to read documents, which contain all characters typed by all users, including the content of private pages. Thes...

5.3CVSS5.2AI score0.87164EPSS
Exploits2References7
Rows per page
Query Builder