55 matches found
Appspace Authorization Issues Vulnerabilities
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from an authorization issue vulnerability that stems from being susceptible to authentication mechanism...
Appspace cross-site scripting vulnerability (CNVD-2021-29735)
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from a cross-site scripting vulnerability that originates from multiple parameters in medianet...
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
Authentication flaw
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-27990
CVE-2021-27990 affects Appspace 6.2.4. The issue is a broken authentication mechanism that allows direct access to pages (e.g., /medianet/mail.aspx), resulting in exposure of the framework’s layouts, menus and functionalities. Public sources in the connected documents corroborate an authorization...
CVE-2021-27989
Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...
CVE-2021-27989
Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...
Cross site scripting
Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...
CVE-2021-27989
Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...
CVE-2021-27989
Appspace 6.2.4 is reported vulnerable to stored cross-site scripting (XSS) in multiple parameters of /medianet/sgcontentset.aspx. The CVE entry identifies the affected product and endpoint but does not publish exact root cause details or a formal fix version. A PoC repository is linked in referen...
Appspace 授权问题漏洞
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from an authorization issue vulnerability that stems from being susceptible to authentication mechanism...
Appspace 跨站脚本漏洞
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from a cross-site scripting vulnerability that originates from multiple parameters in medianet...
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
Server side request forgery (ssrf)
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27670
Summary: CVE-2021-27670 affects Appspace 6.2.4 with a Server-Side Request Forgery (SSRF) flaw in the api/v1/core/proxy/jsonprequest parameter. The connected sources describe the vulnerability and corroborate that exploitable SSRF can lead to access to internal resources and data leakage, with som...