9 matches found
WhisperX REST API code-related vulnerabilities
WhisperX REST API is an audio transcription and analysis enhancement tool developed by Pavel Zbornik. Versions of the WhisperX REST API from 0.3.1 to 0.5.0 have code vulnerabilities. These vulnerabilities stem from the FileService.downloadfromurl function, which performs a file extension check...
CVE-2025-5171
A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.download of the file com\llisoft\controller\OpenController.java. The manipulation of the argument url leads to unrestricted upload. The atta...
CVE-2020-5280
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticcontent.WebjarService. URI normalizatio...
CVE-2020-5280
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticcontent.WebjarService. URI normalizatio...
PT-2020-18370
Name of the Vulnerable Software and Affected Versions http4s versions prior to 0.18.26 http4s versions prior to 0.20.20 http4s versions prior to 0.21.2 Description The issue applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService, and...
CVE-2020-5280: Relative Path Traversal
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticcontent.WebjarService. URI normalizatio...
File Inclusion Vulnerability in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software
SmartLearning system of Shenzhen Xinwei Software Co., Ltd. is an online learning platform. A file inclusion vulnerability exists in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software. An attacker can use the vulnerability to download website files and obtain...
Apache OpenMeetings FileService Arbitrary File Read Vulnerability
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. An Arbitrary File Read Exposure...
