CVE-2021-43829: Unrestricted Upload of File with Dangerous Type

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangerous type of file to server leading to XSS attacks and...

CVE-2021-43828: Improper Privilege Management

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports/ / In that, ownerid is predictable and tmpfile is in format ...

PT-2021-23961

Name of the Vulnerable Software and Affected Versions: PatrOwl versions prior to 1.7.7 Description: The issue affects PatrOwl, a free and open-source solution for orchestrating Security Operations. In affected versions, PatrowlManager handles upload files in the findings import feature without...

PatrOwl 代码问题漏洞

PatrOwl is an extensible, free and open source solution for orchestrating secure operations. PatrOwl is vulnerable to a code issue vulnerability that allows dangerous types of files to be uploaded to the server, which could be exploited by an attacker to cause XSS attacks and potentially other...

Cross-site Scripting (XSS) - Stored in patrowl/patrowlmanager

Description PatrOwl is vulnerable to stored XSS in asset group name. The payload will be triggered when someone try to delete the asset group. Proof of Concept https://drive.google.com/file/d/1F7m9g7s6xp-L5QKy5ACOvndWAj8g20s/view?usp=sharing Impact This vulnerability permit to an authenticate use...

Cross-site Scripting (XSS) - Stored in patrowl/patrowlmanager

Description PatrOwl is vulnerable to stored XSS. Proof of Concept Impact This vulnerability permit to an authenticate user to execute JavaScript on other users Web Browser...

PatrowlHears - PatrowlHears - Vulnerability Intelligence Center / Exploits

PatrOwl provides scalable, free and open-source solutions for orchestrating Security Operations and providing Threat Intelligence feeds. PatrowlHears is an advanced and real-time Vulnerability Intelligence platform, including CVE, exploits and threats news. Try it now! To try PatrowlHears, instal...