Lucene search
+L

150 matches found

NVD
NVD
•added 2022/12/27 11:15 p.m.•27 views

CVE-2022-4768

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

9.8CVSS0.00697EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/27 11:15 p.m.•31 views

Design/Logic Flaw

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

7.5CVSS9.8AI score0.00697EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/12/27 10:33 p.m.•39 views

CVE-2022-4768 Dropbox merou SSH Public Key public_key.py add_public_key injection

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

6.3CVSS10AI score0.00697EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/27 10:33 p.m.•100 views

CVE-2022-4768

CVE-2022-4768 affects Dropbox Merou’s SSH Public Key Handler. The vulnerability lies in the add_public_key function of grouper/public_key.py, where manipulating the argument public_key_str leads to injection. It is possible to launch the attack remotely. The patch identified is d93087973afa26bc0a...

9.8CVSS8.4AI score0.00697EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/12/27 10:33 p.m.•39 views

CVE-2022-4768 Dropbox merou SSH Public Key public_key.py add_public_key injection

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

6.3CVSS6.3AI score
SaveExploits0References6
Mend
Mend
•added 2022/12/27 10:33 p.m.•2 views

CVE-2022-4768

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

9.8CVSS0.00697EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/12/27 12:00 a.m.•16 views

Dropbox Merou 注入漏洞

Dropbox Merou is an open source Dropbox application that allows users to create and manage their group memberships. Dropbox Merou suffers from an injection vulnerability that stems from a problem with the addpublickey function in the grouper/publickey.py file in the component SSH Public Key...

9.8CVSS6.8AI score0.00697EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•4 views

CVE-2022-4768: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack...

9.8CVSS5.2AI score0.00697EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/27 12:00 a.m.•25 views

PT-2022-28082 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: Dropbox merou affected versions not specified Description: A critical issue was found in the SSH Public Key Handler component, specifically in the add public key function of the grouper/public key.py file. The manipulation of the public key s...

9.8CVSS6.9AI score0.00697EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/11/12 12:00 a.m.•15 views

GNUBOARD5 跨站脚本漏洞

GNUBOARD5 is a web forum system based on PHP and MySQL. A security vulnerability exists in GNUBOARD5 that originates from an unknown function in the file bbs/faq.php of the FAQ Key ID Handler component, which can be exploited by an attacker to cause cross-site scripting XSS via manipulation of th...

5.4CVSS5.3AI score0.00421EPSS
SaveExploits0References3
Rows per page
Query Builder