GHSA-WH4C-J3R5-MJHP vulnerabilities

Vulnerabilities for packages: arangodb, saf, sqlpad...

CVE-2019-25367 ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

ArangoDB Community Edition 跨站脚本漏洞

ArangoDB Community Edition is a native multi-model database provided by the American company ArangoDB. Version 3.4.2-1 of ArangoDB Community Edition contains cross-site scripting vulnerabilities. These vulnerabilities stem from multiple cross-site scripting vulnerabilities in the search, user...