Cross site scripting

In Factor App Framework & Headless CMS v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an...

CVE-2021-25985 FactorJS - Insufficient Session Expiration Leads to a Local Account Takeover

In Factor App Framework & Headless CMS v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an...

CVE-2021-25985

In Factor (App Framework & Headless CMS) from v1.0.4 through v1.8.30, the vulnerability stems from improperly invalidating a user session after logout and storing sessions in browser local storage (which has no expiration). This enables an attacker to steal and reuse session data via XSS, potenti...

CVE-2021-25985

In Factor App Framework & Headless CMS v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an...

CVE-2021-25985: Insufficient Session Expiration

In Factor App Framework & Headless CMS v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an...

Darwin Factor 代码问题漏洞

Darwin Factor is a free and open source next-generation TypeScript framework from Darwin, Inc. It is used to create blogs, login pages, and JamStack applications. Darwin Factor has a security vulnerability that stems from incorrectly invalidating a user's session even after the user logs out of t...

PT-2021-16908

Name of the Vulnerable Software and Affected Versions Factor App Framework & Headless CMS versions 1.0.4 through 1.8.30 Description The issue arises from improper session invalidation after a user logs out, combined with the storage of user sessions in the browser's local storage, which lacks an...

IBM Edge Information Disclosure Vulnerability (CNVD-2021-94167)

Edge is a Node.js logic and template engine that contains batteries. IBM Edge has an information disclosure vulnerability that stems from the fact that IBM Edge allows web pages to be stored locally, which can be exploited by an attacker to read those pages...

CVE-2020-4805

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539...

CVE-2020-4809

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633...

CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

Code injection

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

Code injection

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633...

CVE-2020-4805

CVE-2020-4805 affects IBM Edge 4.2 and is described as a local information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. IBM’s bulletin confirms a cache-control vulnerability with a remediation: upgrade via a set of docker images pulle...

CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

PT-2021-12181

Name of the Vulnerable Software and Affected Versions IBM Edge version 4.2 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Edge version 4.2, consider restricting access to locally stored web pages to minimi...

PT-2021-12182

Name of the Vulnerable Software and Affected Versions IBM Edge version 4.2 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Edge version 4.2, consider restricting access to locally stored web pages to minimi...

PT-2021-12180

Name of the Vulnerable Software and Affected Versions IBM Edge version 4.2 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Edge version 4.2, consider restricting access to locally stored web pages to minimi...

CVE-2020-4809

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633...

IBM Edge 安全漏洞

Edge is a Node.js logic and template engine that contains batteries. IBM Edge is vulnerable to an information disclosure vulnerability that stems from the program allowing web pages to be stored locally, which could be exploited by an attacker to read those pages...