3 matches found
Exposure of Private Personal Information to an Unauthorized Actor
Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the getbody function. An attacker can obtain sensitive authorization headers by causing a redirect to a differe...
CVE-2022-36305: Improper Neutralization of Input During Web Page Generation
Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the body function at /web/api/v1/upload/UploadHandler.php...
Vesta Control Panel 跨站脚本漏洞
Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel version v1.0.0-5, which stems from a security issue in the body function of UploadHandler.php...