PT-2021-23165 · Redash · Redash

Name of the Vulnerable Software and Affected Versions: Redash versions 10.0.0 and prior Description: Redash is a package for data visualization and sharing. If an admin sets up Redash without explicitly specifying the REDASH COOKIE SECRET or REDASH SECRET KEY environment variables, a default valu...

DAViCal Andrew's Web Libraries Authorization Issues Vulnerability (CNVD-2020-25813)

DAViCal Andrew's Web Libraries AWL is an AWL project that focuses on providing some shared PHP libraries for DAViCal, a calendar sharing server. An authorization issue vulnerability exists in DAViCal AWL version 0.60 and earlier, which stems from a failure of the session management mechanism to u...

Zend Framework Session Authentication Vulnerability

Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. A security vulnerability exists in Zend/Session/SessionManager in version 2.2.x before ZF 2.2.9 and version 2.3.x...