PT-2020-18465

Name of the Vulnerable Software and Affected Versions Spring Cloud Netflix versions 2.2.x prior to 2.2.4 Spring Cloud Netflix versions 2.1.x prior to 2.1.6 Spring Cloud Netflix older unsupported versions Description The issue allows applications to use the Hystrix Dashboard proxy.stream endpoint ...

Dokeos 'forum' and 'origin' cross-site scripting vulnerabilities

Dokeos is an open source online education and course management system . The system supports file uploading , courseware production , notification and other teaching support functions. Dokeos 1.8.4 and previous versions of cross-site scripting vulnerabilities , the vulnerability stems from...