245 matches found
CVE-2024-8367
A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java of the component...
CVE-2024-8367 HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection
A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java of the component...
CVE-2024-8367 HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection
A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java of the component...
CVE-2024-8367 HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection
A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31. It has been classified as problematic. Affected is an unknown function of the file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java of the component...
CVE-2024-8367
HM Courts & Tribunals Service Probate Back Office is affected by CVE-2024-8367. Affected component: Markdown Handler, specific file src/main/java/uk/gov/hmcts/probate/service/NotificationService.java. Root cause is a manipulation that leads to injection. Public details do not specify affected ver...
Probate Back Office 注入漏洞
Probate Back Office is an open source tool from HM Courts & Tribunals Service. An injection vulnerability exists in Probate Back Office c1afe0cdb2b2766d9e24872c4e827f8b82a6cd31 and prior versions, which stems from an unknown function in the Markdown Handler component and could lead to an injectio...
PT-2024-38972 · Unknown · Hm Courts & Tribunals Service Probate Back Office
Name of the Vulnerable Software and Affected Versions: HM Courts & Tribunals Service Probate Back Office affected versions not specified Description: A vulnerability was found in HM Courts & Tribunals Service Probate Back Office. It has been classified as problematic and affects an unknown functi...
Malicious code in Be.Vlaanderen.Basisregіsters.RoadRegistrу.BackOffice.ZiрArchiveWrіters (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Bаsisregisters.StreetNameRegistry.Api.BackOffice.Abstractioոs (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaandereո.Basisregisters.StreetNameRegistrу.Api.BackOffice (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderеn.Basisregіsters.RoaԁRegistry.BackOffiсe.Api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaaոderen.Basisregisters.ParcelRegistry.Aрi.BасkOffice (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaаnderen.Basisregisters.AddressRegistry.Apі.BackOffice.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
URL Redirection to Untrusted Site ('Open Redirect')
Overview Affected versions of this package are vulnerable to URL Redirection to Untrusted Site 'Open Redirect' in the endpoint of the library. An attacker can redirect users to malicious sites by exploiting the open redirect vulnerability. Remediation Upgrade Umbraco.Cms.Web.BackOffice to version...
Cross-Site Scripting (XSS)
prestashop/prestashop is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the customer thread feature allowing malicious file uploads through the front-office contact form. When an admin opens the attached file in back office, arbitrary JavaScript will be executed which can...
Storefront user can access history and most viewed data from matching back-office user with the same ID
Impact Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user...
CVE-2023-48296 OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID
OroPlatform is a PHP Business Application Platform BAP. Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4...
Improper Authorization
pimcore/ecommerce-framework-bundle is vulnerable to Improper Authorization. The vulnerability is due to a lack of permission enforcement within the admin/ecommerceframework/admin-order/list endpoint. An unauthorized user can access this endpoint without authorization, resulting in the ability to...
Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list
Summary An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Details Permissions do not seem to be enforced when reaching the admin/ecommerceframework/admin-order/list endpoint allowing an authenticated user without the...
PT-2024-19007 · Pimcore · Pimcore Ecommerce Framework Bundle
Name of the Vulnerable Software and Affected Versions: Pimcore Ecommerce Framework Bundle versions prior to 1.0.10 Description: The issue allows an authenticated and unauthorized user to access the back-office orders list and query over the information returned due to a lack of enforced access...