The vulnerability in the Mastodon web application for deploying distributed social networks, related to the use of domain names with incorrect links, allows a hacker to execute a cache poisoning attack.

The vulnerability of the Mastodon web application for deploying distributed social networks is related to the use of domain names with incorrect links. Exploiting this vulnerability could allow a malicious actor to carry out a DNS poisoning attack...

Mozilla: Remote code execution and exfiltration of secret tokens by poisoning the mozilla/fxa CI build cache

Remote code execution and data exfiltration were possible by poisoning a cache used in a CI build process. A proof of concept demonstrated the ability to exfiltrate sensitive data by re-uploading a modified cache artifact. The vulnerability required access to the source code repository to be...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.

Summary Due to Apache Tomcat, IBM Integration Bus is vulnerable to multiple CVEs. CVE-2023-45648, CVE-2023-42794, CVE-2023-44487, CVE-2023-42795. Vulnerability Details CVEID: CVE-2023-45648 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of HTTP...

Cache Poisoning

moodle/moodle is vulnerable to Cache Poisoning. The vulnerability exists because the library does not impose any restrictions on the minimum value for a revision. If the revision is either too old or too new, the file content is cached without undergoing any validation through the file serving...

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

GHSA-CWH2-Q44X-5W3C Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

Design/Logic Flaw

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

UBUNTU-CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548 Moodle: cache poisoning risk with endpoint revision numbers

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548 Moodle: cache poisoning risk with endpoint revision numbers

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

CVE-2023-5548 describes a Moodle-related issue where stronger revision number limitations on file serving endpoints are required to improve cache poisoning protection. The linked OSV/GHSA entries reiterate this root cause, framing it as a risk tied to how file endpoints handle revision data. The ...

PT-2023-32169 · Moodle +7 · Moodle +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the need for stronger revision number limitations on file serving endpoints to enhance cache poisoning protection. This is a measure ...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...