Elgg 跨站脚本漏洞

Elgg is a set of open source social networking engine. The product blogs, file sharing, groups and other features. elgg has a cross-site scripting vulnerability, there are no details of the vulnerability provided...

GHSA-HX6G-Q9V2-XH7V Information exposure in elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX requests to 'ajax/form/admin/'...

Information exposure in elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX requests to 'ajax/form/admin/'...

Information Disclosure

elgg/elgg is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of the user inputs in the forms in the view namespace 'forms/admin'...

Cross-site Scripting (XSS) - Stored in elgg/elgg

Analysis Hello guys, how are doing? Hope you're having an awesome day 🤗 Elgg has a functionality for any authenticated user to report pages to the administrators whenever they think that there's something wrong going on with this page. This functionality has an issue, because in order to create a...

GHSA-GWPX-Q2H9-WXGX elgg is vulnerable to Authorization Bypass Through User-Controlled Key

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

Code injection

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980 Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980

CVE-2021-3980 affects elgg/elgg. The issue is information exposure due to insufficient access control in the view namespace forms/admin for AJAX requests, leading to potential private data leakage. Multiple connected sources (GHSA/HX6G-Q9V2-XH7V2, Veracode, RH Red Hat) describe lack of AdminGatek...

elgg 安全漏洞

Elgg is a set of open source social networking engine. The product features blogging, file sharing, groups, and more. A security vulnerability exists in elgg, which originates from the vulnerability of elgg to disclosure of private personal information to unauthorized users...

Authorization Bypass

elgg/elgg is vulnerablbe to authorization bypass. The vulnerability exists through the user-controlled key, userguid allowing unauthorized access to remote attackers...

CVE-2021-3964

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

Authorization

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964 Authorization Bypass Through User-Controlled Key in elgg/elgg

elgg is vulnerable to Authorization Bypass Through User-Controlled Key...

CVE-2021-3964

The CVE-2021-3964 entry describes an authorization bypass in the Elgg social networking engine caused by a user-controlled key (e.g., user_guid) that can grant access to restricted resources. Multiple connected sources (NVD, Red Hat, GHSA, OSV, CVE list) corroborate the vulnerability in elgg/elgg...

elgg 安全漏洞

Elgg is a set of open source social networking engine. The product blogs, file sharing, groups, and other features. A security vulnerability exists in elgg that stems from elgg's susceptibility to authorization bypass via a user-controlled key...