Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/30 4:17 p.m.•3 views

CVE-2026-117183

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

SaveExploits1References2
Cvelist
Cvelist
•added 2026/10/30 12:00 a.m.•8 views

CVE-2026-117183

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

SaveExploits1References2
CVE
CVE
•added 2026/10/30 12:00 a.m.•5 views

CVE-2026-117183

The astro-notion-blog project (versions 0.6.1 to 0.13.0 ) contains a Path Traversal vulnerability in the FeaturedImage component, specifically within the downloadFile() function of src/lib/notion/client.ts. The root cause is the use of decodeURIComponent() on remote image URLs without sufficient ...

5.9AI score
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•3 views

CVE-2026-117183: n/a: A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape…

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

6AI score
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•1 views

PT-2026-133625

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

6AI score
SaveExploits1References3
EUVD
EUVD
•added 2026/10/30 12:00 a.m.•4 views

EUVD-2026-114179

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

5.9AI score
SaveExploits1References2
Rows per page
Query Builder