CVE-2023-31584

CVE-2023-31584 - cu/silicon におけるクロスサイトスクリプティングの脆弱性 Github リンク: https://github.com/cu/silicon 影響を受けるバージョン: 1 深刻度と CVSS: NIST によるレビュー完了後に更新予定。 種類: クロスサイトスクリプティング 根本原因: ユーザー提供データ（タイトルと本文）をデータベースに挿入する前に、適切な入力検証とサニタイズが行われていない。 影響: 情報漏洩 以下は影響を受ける関数です。...

CVE-2026-82919

A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function createapp of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

CVE-2026-82919

A missing authentication vulnerability was identified in cu silicon up to version 0.1.5 , affecting the create_app function in views.py within the edit Endpoint component. A remote attacker with no prior authentication can exploit this flaw, resulting in low impact on confidentiality, integrity, ...

EUVD-2026-68815

A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function createapp of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

CVE-2026-82919 cu silicon edit Endpoint views.py create_app missing authentication

A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function createapp of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

CVE-2023-31584

GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting XSS vulnerability via the User Input field...

CVE-2023-31584

GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting XSS vulnerability via the User Input field...

PT-2023-23398 · Unknown · Cu/Silicon

Name of the Vulnerable Software and Affected Versions: cu/silicon version a9ef36 Description: The issue is a reflected cross-site scripting XSS vulnerability. It occurs via the User Input field, allowing potential attackers to inject malicious scripts. Recommendations: For cu/silicon version...