CVE-2023-45966

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery SSRF vulnerability...

CVE-2023-45966

The CVE-2023-45966 entry concerns umputun remark42 (versions 1.12.1 and earlier) with a Blind Server-Side Request Forgery (SSRF) vulnerability. Affected component: remark42; root cause is SSRF that is not fully exposed in the provided details. Impact per CVSS indicates high confidentiality impact...

PT-2023-29777 · Umputun · Remark42

Name of the Vulnerable Software and Affected Versions: umputun remark42 versions 1.12.1 and before Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or...

CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...

CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...

CVE-2021-29271

Remark42 prior to version 1.6.1 contains a cross-site scripting (XSS) vulnerability in backend/app/store/comment.go and backend/app/store/service/service.go, exploitable via an XSS payload in the Locator URL. Affected: remark42

CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: LocatorURL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go...

Dmitry Verkhoturov remark42 跨站脚本漏洞

Dmitry Verkhoturov remark42 is an open source application by Dmitry Verkhoturov. A self-hosted, lightweight and simple not yet functional annotation engine that does not spy on users. A cross-site scripting vulnerability exists in remark42 before 1.6.1, which stems from backend/app/store/comment....