70 matches found
CVE-2019-16148
Sakai through 12.6 allows XSS via a chat user name...
CVE-2024-47876
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...
CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...
CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...
CVE-2024-47876
Sakai Kernel vulnerability CVE-2024-47876: Kernel users created with the type roleview could log in as normal users, enabling unauthorized access. Affected in Sakai versions up to 23.2; fixed in 23.3. Root cause: improper access control allowing roleview kernel users to authenticate as non-privil...
CVE-2024-47876 Sakai: Kernel users created with type roleview can login as a normal user
Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...
SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...
GHSA-CX95-Q6GX-W4QP SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...
Sakai 安全漏洞
Sakai is a freely available, feature-rich technology solution for learning, teaching, research and collaboration from Apereo Sakai Open Source. A security vulnerability exists in Sakai versions prior to 23.0 through 23.2, which stems from the fact that a kernel user created using the roleview typ...
sakai-lawyer.jp Cross Site Scripting vulnerability OBB-3909839
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sakai-chintai.net Improper Access Control vulnerability OBB-3860315
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sakai-syakyo.net Cross Site Scripting vulnerability OBB-3581063
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress MicroPayments plugin <= 1.9.5 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Kosuke Sakai in WordPress MicroPayments plugin versions = 1.9.5. Solution Update the WordPress MicroPayments plugin to the latest available version at least 1.9.6...
sakai-osaka-kaigo.com Cross Site Scripting vulnerability OBB-1222625
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sakai-prt.co.jp Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1116243 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting sakai-prt.co.jp website a...
Cross-site scripting in Sakai
Sakai through 12.6 allows XSS via a chat user name...
GHSA-Q8WC-9XVP-G3C3 Cross-site scripting in Sakai
Sakai through 12.6 allows XSS via a chat user name...
CVE-2019-16148
Sakai through 12.6 allows XSS via a chat user name...
