1059 matches found
CVE-2023-0739: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0744: Improper Access Control
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer
Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0744 Improper Access Control in answerdev/answer
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...
PT-2023-16493 · Answerdev · Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is a Cross-site Scripting XSS - Stored vulnerability found in the GitHub repository answerdev/answer. This type of vulnerability allows an attacker to inject malicious scripts in...
answer 跨站脚本漏洞
answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in answer versions prior to 1.0.4, which stems from the presence of stored cross-site scripting XSS...
CVE-2023-0742 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0743: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0743
CVE-2023-0743 is a Cross-site Scripting (XSS) vulnerability in the GitHub repository answerdev/answer prior to version 1.0.4. The issue affects the answer project’s web UI/input handling and is described with high-severity CVSS metrics (C/H, I/H, A/H, user interaction required). The connected doc...
CVE-2023-0744
CVE-2023-0744 affects the GitHub repo answerdev/answer prior to version 1.0.4, enabling an Improper Access Control that can lead to account takeover via the password-reset flow. Public references describe an endpoint abuse: an attacker can trigger password reset via answer/api/v1/user/password/re...
PT-2023-16495 · Unknown · Answerdev/Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be...
CVE-2023-0740: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0742: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0739
CVE-2023-0739 affects the GitHub project answerdev/answer prior to 1.0.4. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to potential integrity and availability impacts. The vulnerability is documented across multiple so...