Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:24 p.m.4 views

CVE-2020-15773

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

6.5CVSS6.8AI score0.00153EPSS
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2024/07/11 1:0 p.m.19 views

What’s New in Rapid7 Products & Services: Q2 2024 in Review

This quarter we continued to make investments that provide security professionals with a holistic, actionable view of their entire attack surface. In Q2, we focused on enhancing visualization, prioritization, and integration capabilities across our key products and services. Below we’ve highlight...

7.6AI score
Exploits0
Prion
Prion
added 2023/04/27 4:15 p.m.15 views

Sql injection

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually...

6.5CVSS8.9AI score0.00064EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/27 3:58 p.m.15 views

CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually...

8.8CVSS9.2AI score0.00064EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/04/27 3:58 p.m.7 views

CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually...

8.8CVSS9AI score0.00064EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.2 views

PT-2023-23004 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: Pimcore versions prior to 10.5.21 Description: A SQL injection vulnerability exists in the translation export API, allowing an attacker to interfere with the queries that the application makes to its database. This can enable an attacker to...

8.8CVSS8.7AI score0.00064EPSS
Exploits0References10
Veeam
Veeam
added 2022/07/15 12:0 a.m.25 views

How To Configure Veeam Backup for Microsoft 365 to Use Microsoft Graph Export API for Teams

Purpose This article documents the procedure for enabling Veeam Backup for Microsoft 365 to backup Teams public channel posts using the Teams Export APIs.Veeam Backup for Microsoft 365 backs up Teams channel messages. For more information on the limitations of Teams chat backup, click here. In...

6.8AI score
Exploits0Affected Software1
OSV
OSV
added 2020/09/18 3:15 p.m.4 views

CVE-2020-15773

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

6.5CVSS6.6AI score0.00153EPSS
Exploits0References2
Prion
Prion
added 2020/09/18 3:15 p.m.17 views

Cross site scripting

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

4CVSS6.3AI score0.00153EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/18 2:4 p.m.13 views

CVE-2020-15773

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

6.4AI score0.00153EPSS
Exploits0References2
Rows per page
Query Builder