GHSA-65PX-4CPF-697R Cross-site scripting vulnerability found in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

GHSA-P7WJ-C85F-XQ9H Answer has Cross-site Scripting vulnerability

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

GHSA-4CWH-8W4G-JXXH Answer contains Improper Access Control vulnerability

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

Answer contains Improper Access Control vulnerability

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0743

Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0744

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0741

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0742

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

Improper access control

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

Answer vulnerable to Race Condition

Race Condition in Switch in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0739

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0741

CVE-2023-0741 : Cross-site Scripting (XSS) via DOM in the GitHub repository answerdev/answer prior to version 1.0.4 . Root cause is a DOM-based XSS vulnerability in the client-side code, enabling attacker-controlled script execution within a user session. The vulnerability is described as affecti...

CVE-2023-0740

CVE-2023-0740 describes a stored Cross-site Scripting (XSS) vulnerability in the open‑source project answerdev/answer prior to version 1.0.4 . Multiple sources (NVD, Red Hat, GHSA, OSV, PT‑Security, PRION) corroborate that inputs could be injected and stored, leading to script execution affecting...

CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer

Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0744 Improper Access Control in answerdev/answer

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

answer 跨站脚本漏洞

answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in answer versions prior to 1.0.4, which stems from the presence of stored cross-site scripting XSS...

PT-2023-16493 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is a Cross-site Scripting XSS - Stored vulnerability found in the GitHub repository answerdev/answer. This type of vulnerability allows an attacker to inject malicious scripts in...

CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...