99 matches found
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
Improper access control
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
The issue CVE-2021-28793 affects vscode-restructuredtext prior to 146.0.0. An incorrect access control allows a crafted project folder to cause arbitrary binaries to run via a crafted workspace configuration. Multiple sources (Red Hat, CNVD, NVD OSV) corroborate the vulnerability and its impact. ...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
CVE-2021-28793
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
Lex Li vscode-restructuredtext 访问控制错误漏洞
Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...
PT-2021-17919
Name of the Vulnerable Software and Affected Versions: vscode-restructuredtext versions prior to 146.0.0 Description: The issue is related to an incorrect access control vulnerability. A crafted project folder could potentially execute arbitrary binaries via a crafted workspace configuration...
CVE-2021-28793: Incorrect Authorization
vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration...
[SECURITY] Fedora 33 Update: gitit-0.13.0.0-4.fc33
Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...
GitLab: [reStructuredText] XSS in project README files
Hi, While experimenting with parser bypass techniques, I discovered that reStructuredText markup can be used to inject a stored JavaScript payload into a project README.rst file. Steps to Reproduce 1. Create a new GitLab project 2. Initialise the project by creating a README file 3. Set the file...
django-markupfield Arbitrary File Read Vulnerability
Django is the Python programming language driven by an open source model-view-controller style Web application framework. Versions prior to django-markupfield 1.3.2 use the default docutils RESTRUCTUREDTEXTFILTERSETTINGS setting, which allows remote attackers to exploit vulnerabilities to include...
Security notice: Django framework arbitrary file include vulnerability-vulnerability warning-the black bar safety net
In the 4 on 2 1 May, based on the python open source web framework Django released a security Bulletin, saying that in≤1.5 version of Django contrib. markup the package there is any file that contains the vulnerability, the attacker may be by docutils to attack. On docutils The Docutils project i...
PT-2015-4913
Name of the Vulnerable Software and Affected Versions django-markupfield versions prior to 1.3.2 Description The issue allows remote attackers to include and read arbitrary files via unspecified vectors. This is due to the use of the default docutils RESTRUCTUREDTEXT FILTER SETTINGS settings in...
Debian: Security Advisory (DSA-2321-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2321-1 : moin - XSS
A cross-site scripting vulnerability was discovered in the reStructuredText parser of Moin, a Python clone of WikiWiki. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2321. The text itsel...
CVE-2011-1058
Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...
Cross site scripting
Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...
PYSEC-2011-6
Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...
