Lucene search
+L

53 matches found

Vulnrichment
Vulnrichment
added 2023/04/06 7:03 p.m.5 views

CVE-2023-29014 Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following ...

6.1CVSS6.1AI score0.00443EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/06 7:03 p.m.46 views

CVE-2023-29014 Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following ...

6.1CVSS6.3AI score0.00443EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/04/06 12:00 a.m.10 views

PT-2023-22089 · Unknown · Goobi Viewer

Name of the Vulnerable Software and Affected Versions: Goobi viewer versions prior to 23.03 Description: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core when using...

6.1CVSS5.9AI score0.00443EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/04/06 12:00 a.m.11 views

Intranda Goobi Viewer Core 跨站脚本漏洞

Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A cross-site scripting vulnerability exists in Intranda Goobi Viewer Core prior to version 23.03, which stems from a cross-site scripting XSS vulnerability in the user comments feature. The vulnerability can ...

6.1CVSS6AI score0.00443EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/06 12:00 a.m.14 views

Intranda Goobi Viewer Core 跨站脚本漏洞

Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A cross-site scripting vulnerability exists in Intranda Goobi Viewer Core versions prior to 23.03, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability. The vulnerability can b...

6.1CVSS6AI score0.00443EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/06 12:00 a.m.10 views

Intranda Goobi Viewer Core 跨站脚本漏洞

Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A cross-site scripting vulnerability exists in Intranda Goobi Viewer Core versions prior to 23.03, which stems from the presence of a cross-site scripting XSS vulnerability. The vulnerability can be exploited...

6.1CVSS6.1AI score0.00443EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/07/27 12:00 a.m.8 views

Intranda Goobi Viewer Core Path Traversal Vulnerability

Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A path traversal vulnerability exists in Intranda Goobi Viewer Core versions prior to 4.8.3. A remote attacker could exploit this vulnerability to access files on the server...

9.6CVSS6.9AI score0.01538EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/22 6:15 p.m.17 views

CVE-2020-15124

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

6.5CVSS7AI score
SaveExploits0References2
NVD
NVD
added 2020/07/22 6:15 p.m.27 views

CVE-2020-15124

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

9.6CVSS9.2AI score0.01538EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/07/22 6:15 p.m.6 views

CVE-2020-15124

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

9.6CVSS5.5AI score0.01538EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2020/07/22 6:15 p.m.37 views

Path traversal

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

4CVSS6.5AI score0.01538EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/07/22 5:35 p.m.29 views

CVE-2020-15124 Path traversal in Goobi viewer Core

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application. This is limited to files accessible to the application server user, eg. tomcat, but can potentially lead to the disclosure of sensitive...

9.6CVSS9.2AI score0.01538EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/22 5:35 p.m.45 views

CVE-2020-15124

Goobi Viewer Core contains a path traversal vulnerability affecting versions prior to 4.8.3. The issue could allow remote attackers to access files on the server that are readable by the application server user (e.g., Tomcat), potentially leading to disclosure of sensitive information. The vulner...

9.6CVSS6.8AI score0.01538EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder