31 matches found
Malicious code in com.unity.nuget.mono-cecil (npm)
The package com.unity.nuget.mono-cecil was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2023-4914
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
MAL-2025-17357 Malicious code in com.unity.nuget.mono-cecil (npm)
The package com.unity.nuget.mono-cecil was found to contain malicious code...
cecil.md.networkofcare.org Cross Site Scripting vulnerability OBB-3876230
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cross Site Scripting (XSS)
cecilapp/cecil is vulnerable to Reflected Cross-site Scripting XSS. The vulnerability is caused by not sanitizing and escaping special characters in the request URI path for the Cecil site generated by cecil serve when 404.html is not configured. This can lead to unauthenticated remote attackers...
Path Traversal
cecil/cecil vulnerable to Relative Path Traversal. The vulnerability is caused by a lack of additional checks when verifying a file is within an expected location, which can lead to the access of files outside of the document root...
Cecil Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
Cecil Path Traversal vulnerability
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
GHSA-P9Q8-7X22-5X77 Cecil Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
GHSA-Q8HR-4W58-985P Cecil Path Traversal vulnerability
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4913
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914 Relative Path Traversal in cecilapp/cecil
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914 Relative Path Traversal in cecilapp/cecil
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914 Relative Path Traversal in cecilapp/cecil
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914
CVE-2023-4914 is a Relative Path Traversal vulnerability in the Cecil project (cecilapp/cecil) prior to version 7.47.1. The initial and connected sources consistently describe the issue as path traversal, but do not provide explicit root-cause details in these documents. Affected software/version...
CVE-2023-4913 Cross-site Scripting (XSS) - Reflected in cecilapp/cecil
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4913 Cross-site Scripting (XSS) - Reflected in cecilapp/cecil
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4913
CVE-2023-4913 affects Cecil (cecilapp/cecil) prior to 7.47.1, where a reflected XSS exists due to unsanitized user input echoed back by the application. The issue is confirmed in multiple records (e.g., CVE, PT-2023-31061, and related advisories). Remediation: upgrade to version 7.47.1 or later. ...