12 matches found
CVE-2021-20687
Cross-site request forgery CSRF vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2021-20685
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20686
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20686
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2021-20687
CVE-2021-20687 describes a cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 that can allow an attacker to hijack the administrator’s authenticated session. Affected component: Kagemai defect tracking system (version 0.8.8). Root cause: CSRF (CWE-352) vulnerability enabling uninten...
CVE-2021-20687
Cross-site request forgery CSRF vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2021-20686
CVE-2021-20686 is a stored cross-site scripting vulnerability in Kagemai 0.8.8 that allows an arbitrary script to run in a user’s browser. The public documents identify the vulnerable product and version (Kagemai 0.8.8) and describe the impact as arbitrary script execution via unspecified vectors...
CVE-2021-20686
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20685
CVE-2021-20685 concerns the Kagemai bug-tracking system. Multiple sources identify it as a cross-site scripting (XSS) vulnerability in Kagemai versions around 0.8.6–0.8.8, permitting remote attackers to inject arbitrary scripts that run in a user’s web browser. The precise attack vectors are not ...