CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

CVE-2024-55582

CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...

CVE-2024-55582: Cleartext Storage of Sensitive Information

Oxide before 6 has unencrypted Control Plane datastores...

PT-2024-36560

Name of the Vulnerable Software and Affected Versions Oxide versions prior to 6 Description The issue concerns unencrypted Control Plane datastores in Oxide. This means that data stored in the Control Plane is not encrypted, potentially exposing it to unauthorized access. There is no information...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

CVE-2023-50913

Oxide control plane software versions prior to 5 are vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to trick the server into making requests to internal or external systems, potentially leading to unauthorized access to sensitive data. To remediate this issue, use...

PT-2024-14005 · Oxide · Oxide

Name of the Vulnerable Software and Affected Versions: Oxide control plane software versions prior to 5 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external systems. This can...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 5 that stems from vulnerability to server-side request forgery attacks...

CVE-2023-50913: Server-Side Request Forgery (SSRF)

Oxide control plane software before 5 allows SSRF...

zincoxide.ir Cross Site Scripting vulnerability OBB-1477605

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2016-1586

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3...

CVE-2016-1586

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3...

Design/Logic Flaw

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3...

CVE-2016-1586

Affects Oxide prior to v1.18.3 where a malicious webview can install long-lived unload handlers that reuse an incognito BrowserContext queued for destruction. This could lead to exposure of sensitive information as described in CVE-2016-1586. Remediation: upgrade to Oxide 1.18.3 or later (or appl...

CVE-2016-1586

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3...

CVE-2016-1586

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3...