Missing Authorization

Overview @paperclipai/ui is a Prebuilt Paperclip board UI assets. Affected versions of this package are vulnerable to Missing Authorization via import flow. An attacker can gain remote code execution using company creation endpoint that improperly checks for admin rights in authenticated mode...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via import flow. An attacker can gain remote code execution using company creation endpoint that improperly checks for admin rights in authenticated mode deployment with default configuration. Remediation Upgrade...

PT-2021-19299

Name of the Vulnerable Software and Affected Versions Mautic versions prior to 2.16.5 Mautic versions prior to 3.2.4 Description This issue relates to a cross-site scripting vulnerability that can be executed when creating or editing a company, requiring the user to be logged in as an...