Cecil Path Traversal Vulnerability

Cecil is a static site generator. A security vulnerability exists in Cecil versions prior to 7.47.1 that stems from the presence of relative path traversal...

PT-2023-31061 · Cecil · Cecil

Name of the Vulnerable Software and Affected Versions: cecilapp/cecil versions prior to 7.47.1 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application takes user input and sends it back to the user without...

CVE-2023-4914: Relative Path Traversal

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

PT-2023-31062

Name of the Vulnerable Software and Affected Versions cecil versions prior to 7.47.1 Description The issue is related to a Relative Path Traversal in the GitHub repository cecilapp/cecil. Recommendations For versions prior to 7.47.1, update to version 7.47.1 or later to resolve the issue...

CVE-2023-4913: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...

Cecil Cross-Site Scripting Vulnerability

Cecil is a static site generator. A cross-site scripting vulnerability exists in Cecil versions prior to 7.47.1 that stems from the presence of reflected cross-site scripting XSS...

Relative Path Traversal vulnerability in the serve command

Description When a Cecil site is served by cecil serve, Relative Path Traversal is possible via the URI path. Proof of Concept Run the following commands: mkdir cecil-path-traversal-poc cd cecil-path-traversal-poc curl -L https://cecil.app/cecil.phar -o cecil chmod +x cecil ./cecil new:site -n...

Reflected Cross-Site Scripting (XSS) vulnerability in the dynamic 404 page

Description When running a Cecil site by cecil serve without a 404.html, Reflected Cross-Site Scripting XSS is possible via the URI path. Proof of Concept Run the following commands: mkdir cecil-404-xss-poc cd cecil-404-xss-poc curl -L https://cecil.app/cecil.phar -o cecil chmod +x cecil ./cecil...

CECIL - Modetrends & Shopping - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CECIL - Modetrends & Shopping published at the 'play' market has multiple vulnerabilities...

MIT Students Use LED Lights, Hack Building to Play Tetris

Students at MIT took to the university’s Cecil and Ida Green Building over the weekend to transform the 21-story research building into an oversized, playable game of Tetris. Emulating the classic ’80s video game with the help of a console and 153 color-changing LED lights, students were able to...