GHSA-QH2X-HPF9-CF2G OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

Cross-site Scripting (XSS)

@keystone-6/auth is vulnerable to cross-site scripting. The vulnerability exists in the pageMiddleware function in index.ts as it does not properly set pathname, allowing an attacker to gain sensitive information by redirecting to malicious websites...

Reflected cross-site scripting (XSS) vulnerability

This security advisory relates to a capability for an attacker to exploit a reflected cross-site scripting vulnerability when using the @keystone-6/auth package. Impact The vulnerability can impact users of the administration user interface when following an untrusted link to the signin or init...

GHSA-HRGX-7J6V-XJ82 Reflected cross-site scripting (XSS) vulnerability

This security advisory relates to a capability for an attacker to exploit a reflected cross-site scripting vulnerability when using the @keystone-6/auth package. Impact The vulnerability can impact users of the administration user interface when following an untrusted link to the signin or init...

CVE-2022-0087

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0087

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

keystone cross-site scripting vulnerability

Keystone is one of the most powerful Node.js headless Cms. used to help you build and scale faster than any other Cms or application framework. keystone suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in web applications. An...

CVE-2022-0087

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0087

Keystone 6 login page vulnerability (CVE-2022-0087) involves an open redirect via the from= URL parameter, which can be escalated to reflected XSS. The issue is highlighted in the Nuclei template for Keystone 6 Login Page, describing an open redirect and potential XSS on the authentication flow. ...

Keystone cross-site scripting vulnerabilities

Keystone is one of the most powerful Node.js headless Cms. used to help you build and scale faster than any other Cms or application framework. keystone suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in web applications. An...

PT-2022-12971

Name of the Vulnerable Software and Affected Versions keystone versions prior to 1.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This can impact users of the administration user interface when following an...

CVE-2022-0087: Improper Neutralization of Input During Web Page Generation

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

keystonenetworkingsystems.com Cross Site Scripting vulnerability OBB-2324459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

keystone:fuzz_asm_hex: Object-size in llvm_ks::MCInstrInfo::getName

Detailed Report: https://oss-fuzz.com/testcase?key=6282983754039296 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmhex Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Object-size Crash Address: Crash State: llvmks::MCInstrInfo::getName...

keystone:fuzz_asm_arm_armv8be: Segv on unknown address in llvm_ks::StringMapImpl::LookupBucketFor

Detailed Report: https://oss-fuzz.com/testcase?key=6614428838133760 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmarmarmv8be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvmks::StringMapImpl::LookupBucketFor...

keystone:fuzz_asm_x86_32: Heap-use-after-free in X86AsmParser::MatchAndEmitInstruction

Detailed Report: https://oss-fuzz.com/testcase?key=6625136556507136 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8632 Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x611000000be8 Crash State:...

keystone:fuzz_asm_sparc64be: Invalid-free in llvm_ks::MCFragment::destroy

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5347715672834048 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address:...

keystone:fuzz_asm_sparcbe: Crash in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=4765190900023296 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmsparcbe Job Type: aflasankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6190001f478f Crash...