CVE-2024-45816 Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks...

CVE-2024-46976 Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend

Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content that will be executed in the victim's browser when browsing documentation or navigating to an attack...

CVE-2024-46976

CVE-2024-46976 affects the Backstage framework, specifically the @backstage/plugin-techdocs-backend . The root cause is that attacker-controlled content in the TechDocs storage buckets can inject executable scripts into TechDocs content, which then execute in a victim’s browser when documentation...

Backstage 安全漏洞

Backstage is a Backstage open source application. Backstage is an open platform for building developer portals. A security vulnerability exists in Backstage version 1.25.0, which originates from an instance of Backstage with the Directory Backend plugin installed, where a malicious actor with...

Contao 代码问题漏洞

Contao is an open source Content Management System CMS developed in PHP by Contao Open Source. The system supports search engines, rights management, and CSS frameworks. A code issue vulnerability exists in Contao 4.0.0 and prior versions, which originates from a backend user with file manager...

PT-2024-31703 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions prior to 4.13.49 Description: The issue allows authenticated users in the back end to list files outside the document root in the file selector widget. There are no known workarounds for this issue. Recommendations: Update to...

PT-2024-31602 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions prior to 4.13.49 Contao versions prior to 5.3.15 Contao versions prior to 5.4.3 Description: Contao is an Open Source CMS. In affected versions, a back end user with access to the file manager can upload malicious files and...

Contao 路径遍历漏洞

Contao is Contao open source a set of open source content management system CMS developed using PHP. The system supports search engines, rights management and CSS frameworks. A path traversal vulnerability exists in versions prior to Contao 4.13.49, which stems from a back-end authenticated user...

RHSA-2017:1259 Red Hat Security Advisory: spacewalk-backend security update

Bulletin has no description...

PT-2024-9770 · Unknown · @Backstage/Plugin-Techdocs-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-techdocs-backend versions prior to 1.10.13 Description: The issue allows an attacker with control of the TechDocs storage buckets to inject executable scripts in the TechDocs content. These scripts will be executed in the...

Logic flaw vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41275)

UFIDA U8CRM is a professional enterprise-level CRM software. A logic flaw vulnerability exists in UFIDA U8CRM, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

Veeam Data Cloud for Microsoft Azure Release Information and Build Numbers

You are viewing an archived changelog for Veeam Data Cloud for Microsoft Azure. Changelog information has moved to a dedicated webpage, where you can find updates for all Veeam Data Cloud workloads in one place. Click here to visit the new changelog. This KB article lists all versions of Veeam Da...

RHSA-2012:0436 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

RHSA-2012:0102 Red Hat Security Advisory: Red Hat Network Proxy spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2012:0101 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2019:1663 Red Hat Security Advisory: spacewalk-backend and spacewalk-proxy security update

Bulletin has no description...

RHSA-2013:0848 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...