CVE-2026-113715 virtualenv: Venv configuration readback can reinterpret path boundaries

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...

CVE-2026-113715 virtualenv: Venv configuration readback can reinterpret path boundaries

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/site/filterKeywordsave location cross-site request...

CVE-2024-22818: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2023-52072: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2023-52074: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

PT-2024-14386 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/system/site/config footer updagte". This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For...

PT-2018-13875

Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to update website settings via the "/admin/config/system/site-information" API endpoint. Recommendations For UNL-CMS version 7.59, update the software to a...