51 matches found
CVE-2026-119649 Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...
CLSA-2026-1783558973 TuxCare security update for spatie/laravel-medialibrary (2 CVEs)
TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 10.15.0-p2+tuxcare...
CLSA-2026-1783645380 TuxCare security update for spatie/laravel-medialibrary (2 CVEs)
TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 9.12.4-p2+tuxcare...
CLSA-2026-1768524779 TuxCare security update for spatie/laravel-medialibrary (1 CVE)
TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 10.15.0-p1+tuxcare...
CLSA-2026-1768524780 TuxCare security update for spatie/laravel-medialibrary (1 CVE)
TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 9.12.4-p1+tuxcare...
PT-2026-73706
TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 9.12.4-p1+tuxcare...
PT-2026-73705
TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 10.15.0-p1+tuxcare...
PT-2026-75341
TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 10.15.0-p2+tuxcare...
PT-2026-75347
TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 9.12.4-p2+tuxcare...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the addMediaFromUrl function. An attacker can make the server initiate arbitrary outbound HTTP requests by supplying crafted URLs. Remediation Upgrade spatie/laravel-medialibrary to version 11.23.0 o...
Incomplete List of Disallowed Inputs
Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the defaultSanitizer function in FileAdder.php. An attacker can upload files with double extensions or omitted executable extensions, potentially leading to remote code execution by bypassing fil...
EUVD-2018-17736
Malware in sbrugna...
EUVD-2023-59441
Malicious code in bioql PyPI...
CVE-2023-52953
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-52953
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-52953
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-52953
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-52953
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-52953
The CVE-2023-52953 entry describes a path traversal vulnerability in the Medialibrary module. Affected software is not concretely specified in the provided documents; the root cause details are not disclosed here. Impact is stated as affecting integrity and confidentiality, with CVSS-derived metr...
PT-2025-1559 · Unknown · Medialibrary
Name of the Vulnerable Software and Affected Versions: Medialibrary module affected versions not specified Description: The issue is related to a path traversal vulnerability in the Medialibrary module. Successful exploitation of this vulnerability will affect the integrity and confidentiality of...