CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

Path traversal

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

PT-2022-26302 · Lavalite · Lavalite

Name of the Vulnerable Software and Affected Versions: Lavalite version 9.0.0 Description: The issue allows for path traversal attacks through the XSRF-TOKEN cookie, enabling read access to arbitrary files on the server. Recommendations: For Lavalite version 9.0.0, consider restricting access to...

CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

CVE-2022-42188

CVE-2022-42188 affects Lavalite 9.0.0 where the XSRF-TOKEN cookie is vulnerable to path traversal, allowing read access to arbitrary server files. The root cause is a path traversal issue tied to the XSRF-TOKEN cookie handling. Documented impact is read access; other details such as exploit avail...

Lavalite 9.0.0 XSRF TOKEN cookie File path traversal Vulnerability

Title: Lavalite-9.0.0 XSRF-TOKEN cookie File path traversal Author: nu11secur1ty Vendor: https://lavalite.org/ Software: https://github.com/LavaLite/cms/releases/tag/v9.0.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite Description: The XSRF-TOKEN cookie is...

Atlassian Jira 8.15.x < 8.16.0 XSRF (JRASERVER-72761)

The version of Atlassian Jira installed on the remote host is prior to 8.15.x 8.16.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72761 advisory. - Replay attack via the CSRF failure retry form - CVE-2021-39124 CVE-2021-39124 Note that Nessus has not tested for th...

Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 XSRF (JRASERVER-73073)

The version of Atlassian Jira installed on the remote host is prior to 8.13.15 / 8.14.x 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73073 advisory. - jira-importers-plugin has misconfigured XSRF protection - CVE-2021-43941 CVE-2021-43941 Note that...

Atlassian Jira < 8.13.16 / 8.14.x < 8.20.5 / 8.21.0 XSRF (JRASERVER-73170)

The version of Atlassian Jira installed on the remote host is prior to 8.13.16 / 8.14.x 8.20.5 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73170 advisory. - CSRF allows toggling Thread Contention and CPU Monitoring - CVE-2021-43953 CVE-2021-43953 Note th...

Atlassian Jira < 8.5.10 / 8.6.x < 8.13.1 XSRF (JRASERVER-71806)

The version of Atlassian Jira installed on the remote host is prior to 8.5.10 / 8.6.x 8.13.1. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-71806 advisory. - CSRF token theft through referrer headers - CVE-2021-39126 CVE-2021-39126 Note that Nessus has not tested fo...

Paymoney 3.3 Cross Site Scripting Vulnerability

Title: paymoney-3.3 XSS-Reflected Author: nu11secur1ty Vendor: https://paymoney.techvill.org/ Software: paymoney-3.3 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3 Description: The parameters firstname and lastname in Users are vulnerable...

Paymoney 3.3 Cross Site Scripting

Title: paymoney-3.3 XSS-Reflected Author: nu11secur1ty Date: 07.02.2022 Vendor: https://paymoney.techvill.org/ Software: paymoney-3.3 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3 Description: The parameters firstname and lastname in User...

GHSA-8VPW-MGPF-MPVV Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests...

Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests...

Laravel Framework RCE Vulnerability

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in...

GHSA-QVQM-H22R-4CP9 Laravel Framework RCE Vulnerability

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in...

SAP BusinessObjects Business Intelligence Platform XSRF (3130497)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a cross site request forgery XSRF vulnerability. An XSRF token visible in the URL may lead to information disclosure. Note that Nessus has not attempted to exploit these issues bu...

Cisco SD-WAN vManage Software XSRF (cisco-sa-sdwan-vmanage-csrf-rxQL4tXR)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an...

Atlassian Jira < 8.13.18 / 8.14.x < 8.20.6 / 8.21.0 XSRF (JRASERVER-73138)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is affected by a cross-site request forgery XSRF vulnerability. Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default...