Lucene search
+L

21 matches found

Veracode
Veracode
added 2024/11/20 3:35 a.m.12 views

Improper File URI Scheme Validation

changedetection.io is vulnerable to improper file URI scheme validation. The vulnerability is due to a logic flaw in the issafeurl function, which improperly allows the file: scheme and insufficiently restricts access to local file paths when ALLOWFILEURI is set to false or undefined...

8.6CVSS6.4AI score0.00697EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder