Lucene search
+L

2386 matches found

Prion
Prion
•added 2021/11/19 1:15 p.m.•32 views

Cross site scripting

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.01374EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/19 12:15 p.m.•45 views

CVE-2021-3920 Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.6CVSS5.8AI score0.01374EPSS
SaveExploits1References2
CVE
CVE
•added 2021/11/19 12:15 p.m.•78 views

CVE-2021-3920

The CVE-2021-3920 entry concerns grav-plugin-admin for Grav CMS. The vulnerability is Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting). The issue is a stored XSS in getgrav/grav-plugin-admin per the CVE record. Affected component: grav-plugin-admin plugin; root c...

5.4CVSS5.6AI score0.01374EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/11/19 12:15 p.m.•4 views

CVE-2021-3920

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS0.01374EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/19 12:00 a.m.•5 views

CVE-2021-3920: Improper Neutralization of Input During Web Page Generation

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.8AI score0.01374EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/19 12:00 a.m.•6 views

PT-2021-22455

Name of the Vulnerable Software and Affected Versions grav-plugin-admin affected versions not specified Description The issue concerns Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user...

5.4CVSS0.01374EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2021/11/10 4:48 p.m.•37 views

Path traversal in grav

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS7.2AI score0.04362EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/11/10 4:48 p.m.•44 views

GHSA-8C5P-4362-9333 Path traversal in grav

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS7.4AI score0.04362EPSS
SaveExploits1References4
Veracode
Veracode
•added 2021/11/08 3:16 a.m.•28 views

Path Traversal

getgrav/grav is vulnerable to path traversal. An attacker can traverse the file system to access files or directories when using bin/grav server...

7.5CVSS4.9AI score0.04362EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2021/11/05 3:15 p.m.•26 views

CVE-2021-3924

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS0.04362EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/05 3:15 p.m.•24 views

CVE-2021-3924

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

7.5CVSS6.7AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/05 3:15 p.m.•9 views

CVE-2021-3924

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS7.2AI score0.04362EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/05 3:15 p.m.•25 views

Path traversal

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

5CVSS7.5AI score0.04362EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/11/05 2:50 p.m.•103 views

CVE-2021-3924

CVE-2021-3924 affects Grav (getgrav/grav) and is caused by an improper limitation of a pathname to a restricted directory (path traversal). The vulnerability is in the path handling logic of Grav, allowing access to files or directories outside the intended scope. Multiple connected sources confi...

8.8CVSS7.6AI score0.04362EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/05 2:50 p.m.•36 views

CVE-2021-3924 Path Traversal in getgrav/grav

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS7.7AI score0.04362EPSS
SaveExploits1References2
Mend
Mend
•added 2021/11/05 2:50 p.m.•2 views

CVE-2021-3924

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS0.04362EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•1 views

PT-2021-22487

Name of the Vulnerable Software and Affected Versions grav affected versions not specified Description The issue is related to Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This means that an attacker could potentially access files or directories...

8.8CVSS0.04362EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/11/05 12:00 a.m.•16 views

Grav 路径遍历漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product presentations. A path traversal vulnerability exists in grav, which stems from an improper restriction of pathnames to restricted directories in the affected product...

8.8CVSS7.6AI score0.04362EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•2 views

CVE-2021-3924: Improper Limitation of a Pathname to a Restricted Directory

grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

8.8CVSS5.8AI score0.04362EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/11/01 7:17 p.m.•44 views

Cross-Site Scripting in grav

grav prior to version 1.7.24 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS5.6AI score0.00592EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder