58 matches found
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27670
Summary: CVE-2021-27670 affects Appspace 6.2.4 with a Server-Side Request Forgery (SSRF) flaw in the api/v1/core/proxy/jsonprequest parameter. The connected sources describe the vulnerability and corroborate that exploitable SSRF can lead to access to internal resources and data leakage, with som...
Appspace Code Issues Vulnerabilities
Appspace is an application from the US-based Appspace Inc. Provides built-in content policies to easily implement and execute team communication programs. A security vulnerability exists in Appspace 6.2.4, which stems from the api/v1/core/proxy/jsonprequest url parameter...
Appspace Cross-Site Scripting Vulnerability
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...
CVE-2021-27564
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...
CVE-2021-27564
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...
Cross site scripting
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...
CVE-2021-27564
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...
CVE-2021-27564
Summary (CVE-2021-27564): A stored XSS vulnerability affects Appspace 6.2.4. After an authenticated user submits an XSS payload in the groups section of the network tab, the payload is stored as the group name. When other members visit that group, the payload executes in their context. The availa...
CVE-2021-27564
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes...
Appspace 跨站脚本漏洞
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...
Appspace On-Prem Cross-Site Scripting Vulnerability
AppSpace is a desktop management tool. A cross-site scripting vulnerability exists in Appspace On-Prem, which can be exploited by an attacker to steal session tokens via XSS...
CVE-2020-5393
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...
CVE-2020-5393
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...
CVE-2020-5393
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...
Cross site scripting
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...
CVE-2020-5393
CVE-2020-5393 affects Appspace On-Prem (up to 7.1.3). A Cross-Site Scripting (XSS) flaw can enable an attacker to steal session tokens. The CNVD entry for Appspace On-Prem Cross-Site Scripting Vulnerability corroborates the XSS vector, but the provided documents do not specify affected subcompone...