Information disclosure

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

PT-2024-12817 · Softwarex · Software Fx Chart Fx 7

Name of the Vulnerable Software and Affected Versions: Software FX Chart FX 7 version 7.0.4962.20829 Description: The issue allows attackers to enumerate and read files from the local filesystem by sending crafted web requests. Recommendations: For Software FX Chart FX 7 version 7.0.4962.20829,...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611

The CVE-2023-39611 entry concerns Software FX Chart FX 7 (version 7.0.4962.20829). The vulnerability allows an attacker to enumerate and read files on the local filesystem by sending crafted web requests, indicating a local file disclosure issue in the web-facing functionality. The root cause and...

Software FX Chart FX Security Vulnerability

Software FX Chart FX is a data visualization library from Software FX that allows developers to create a variety of charts. A security vulnerability exists in Software FX Chart FX version 7 7.0.4962.20829, which originates from a vulnerability that allows an attacker to enumerate and read files o...

CVE-2023-39611: Improper Limitation of a Pathname to a Restricted Directory

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-39611

An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests...

CVE-2023-49734

Apache Superset is affected by an privilege-escalation vulnerability (CVE-2023-49734) where an authenticated Gamma user can create a dashboard, add charts, and automatically become an owner of those charts, gaining write permissions. Affected versions include the prior 2.1.x line (before 2.1.2) a...

CVE-2023-49734 Apache Superset: Privilege Escalation Vulnerability

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2...

CVE-2023-48778

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778 WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778 WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

CVE-2023-48778

CVE-2023-48778 is a CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce affecting versions up to 1.1.5. The issue is fixed in version 1.1.6. No exploitation details are provided in the connected documents; remediation is to update to 1.1.6 or later.

WordPress Plugin Product Size Chart For WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-30957 · Villatheme · Villatheme Product Size Chart For Woocommerce

Name of the Vulnerable Software and Affected Versions: VillaTheme Product Size Chart For WooCommerce versions 1.1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

CVE-2023-48778: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5...

Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Apache Superset Cross-site Scripting vulnerability

Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store malicious code into Chart's metadata, this code could get executed if a user specifically accesses a specific deprecated API endpoint. This issue affects Apache...

GHSA-WQ8Q-99P5-XFRW Apache Superset Cross-site Scripting vulnerability

Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store malicious code into Chart's metadata, this code could get executed if a user specifically accesses a specific deprecated API endpoint. This issue affects Apache...