8 matches found
CVE-2026-12986
Technical details are not publicly available in the provided documents. Monitor for updates.
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...
Brute Force
Overview Affected versions of this package are vulnerable to Brute Force via the login process. An attacker can gain unauthorized access or disrupt service by repeatedly attempting authentication without restriction. Remediation There is no fixed version for...
Cross-site Scripting
console-common is vulnerable to cross-site scripting XSS attacks. They are possible because it does not perform HTML escaping properly...
Cross-site Request Forgery (CSRF)
console-common is susceptible to cross-site request forgery CSRF attacks. The vulnerability exists because of a flaw in Web Container sub component...
Cross-site Scripting (XSS)
console-common is vulnerable to cross-site scripting XSS attacks. The vulnerability is possible due to a flaw in the admin interface...