breuninger-software.de Cross Site Scripting vulnerability OBB-3656242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.breuninger.boot:spring-boot-starter-breuninger-togglz (>=2.0.0 <=2.0.5.RELEASE), com.oneops:secrets-proxy (>=1.2.0 <=1.5.0) +13 more potentially affected by CVE-2020-28191 via org.togglz:togglz-console (>=0.0.1 <=2.8.0)

org.togglz:togglz-console MAVEN version =0.0.1, =2.0.0, =1.2.0, =1.1, =1.0, =0.29.0, =2.1.0, =0.45.0, =0.45.0, =0.45.0, =0.8.0, =0.19.0, =0.8.0, =1.9.0, =2.2.0.Final, =2.8.0 Source cves: CVE-2020-28191 Source advisory: OSV:GHSA-697V-PXG3-J262...

Breuninger - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Breuninger published at the 'play' market has multiple vulnerabilities...