CVE-2021-21251

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. This issue may lead to arbitrary file write. The KubernetesResource REST endpoint untars user controlled data from the request body using TarUtils. TarUtils is a custom library...

Cross site request forgery (csrf)

A CWE-352: Cross-Site Request Forgery CSRF vulnerability exists that could induce users to perform unintended actions, leading to the override of the system?s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX...

spaceLYnk 跨站请求伪造漏洞

Schneider Electric spaceLYnk is a programmable logic controller from Schneider Electric, France. spaceLYnk suffers from a cross-site request forgery vulnerability that stems from the presence of a CWE-352:Cross-Site Request Forgery CSRF vulnerability, which could entice a user to perform an...