EUVD-2023-47234

Malicious code in bioql PyPI...

CVE-2023-42808

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

Mozilla: two aws access key and secret key and database username and password exposed

A security vulnerability was identified in a Docker image hosted on Docker Hub. The image, associated with Mozilla's Common Voice project, was found to contain exposed AWS access keys, AWS secret keys, and database credentials. These sensitive credentials were discovered within the file...

CVE-2023-42808

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

Cross site scripting

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

CVE-2023-42808

CVE-2023-42808 affects Mozilla Common Voice, Version 1.88.2, with a reflected XSS vulnerability. The issue arises because user-controlled data reaches a path expression in a server-side request, enabling reflected XSS in the server origin context. The provided documents do not confirm a patch or ...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

Common Voice Cross-Site Scripting Vulnerability

Common Voice is an open source web application from Common Voice. A cross-site scripting vulnerability exists in Common Voice version 1.88.2, which is rooted in vulnerability to cross-site scripting attacks.This issue could lead to cross-site scripting XSS in Common Voice's servers...

PT-2023-28594 · Unknown · Common Voice

Name of the Vulnerable Software and Affected Versions: Common Voice version 1.88.2 Description: The issue is related to reflected Cross-Site Scripting XSS in the context of Common Voice’s server origin, given that user-controlled data flows to a path expression. This may lead to reflected...