CVE-2023-39584

Hexo up to v7.0.0 RC2 was discovered to contain an arbitrary file read vulnerability...

Design/Logic Flaw

Hexo up to v7.0.0 RC2 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-39584

Hexo up to v7.0.0 RC2 was discovered to contain an arbitrary file read vulnerability...

Jeecg-Boot Security Vulnerabilities

Jeecg-Boot is a low-code platform based on a code generator from the JeecgBoot community. A security vulnerability exists in Jeecg-Boot v3.5.3 and earlier versions, which stems from an arbitrary file read vulnerability in interface /testConnection...

PT-2023-27030 · Hexo · Hexo

Name of the Vulnerable Software and Affected Versions: Hexo versions up to 7.0.0 RC2 Description: Hexo was discovered to contain an arbitrary file read issue. This allows for the reading of arbitrary files, potentially leading to sensitive information disclosure. Recommendations: For versions up ...

CVE-2023-39584

CVE-2023-39584 (Hexo) affects Hexo up to 7.0.0 RC2. The issue is an arbitrary file read caused by a flawed file read/path handling in the include_code functionality, enabling reading arbitrary files. Impact is potential sensitive data disclosure. Remediation: upgrade to a version later than 7.0.0...

CVE-2023-39584

Hexo up to v7.0.0 RC2 was discovered to contain an arbitrary file read vulnerability...

CVE-2023-41578

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection...

CVE-2023-39584

Hexo up to v7.0.0 RC2 was discovered to contain an arbitrary file read vulnerability...

Hexo Security Vulnerability

Hexo is a fast, simple and powerful blogging framework by Tommy Chen, an individual developer in China. A security vulnerability exists in Hexo v7.0.0 RC2 and earlier versions, which stems from an arbitrary file read vulnerability...

PT-2023-27983 · Jeecg · Jeecg

Name of the Vulnerable Software and Affected Versions: Jeecg versions up to 3.5.3 Description: The issue is an arbitrary file read vulnerability. It can be exploited via the interface "/testConnection". Recommendations: For versions up to 3.5.3, as a temporary workaround, consider restricting...

CVE-2023-41578

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection...

CVE-2023-41578

Jeecg boot up to v3.5.3 contains an arbitrary file read vulnerability exploitable via the /testConnection interface. The CVE entry documents impact to confidentiality (high) with no integrity/availability impact, and root cause is an insecure/unrestricted file read path exposed through the testCo...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

Exploit-for-ImageMagick-CVE-2022-44268 A bash script for easly...

CVE-2023-4480 Arbitrary File Read in Fusion File Manager

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...

CVE-2023-4616 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validati...

CVE-2023-4615 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of prope...

CVE-2023-4615 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of prope...

Directory Traversal

Overview weichsel/ZIPFoundation is an Effortless ZIP Handling in Swift. Affected versions of this package are vulnerable to Directory Traversal via extracting a crafted zip file, allowing attackers to write files outside the extraction directory. Details A Directory Traversal attack also known as...

Directory traversal

GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the .git directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the .git...