PT-2023-21214 · Prestashop · Eo Tags

Name of the Vulnerable Software and Affected Versions: eo tags package versions prior to 1.4.19 for PrestaShop Description: The issue allows SQL injection via a crafted ga cookie. This enables potential attackers to inject malicious SQL code, potentially leading to unauthorized access or...

SUSE CVE-2021-43859

XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulatin...