4 matches found
Exposure of Private Personal Information to an Unauthorized Actor
Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the getbody function. An attacker can obtain sensitive authorization headers by causing a redirect to a differe...
CVE-2022-36305
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the body function at /web/api/v1/upload/UploadHandler.php...
CVE-2022-36305: Improper Neutralization of Input During Web Page Generation
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the body function at /web/api/v1/upload/UploadHandler.php...
Vesta Control Panel Cross-Site Script Vulnerability
Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel version v1.0.0-5, which stems from a security issue in the body function of UploadHandler.php...