BIT-PIMCORE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

The vulnerabilities of microprogramming software in thermal scanning systems like FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi system for centralized data storage and management, allowing intruders to enhance their privileges.

The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the centralized data storage and management system FeverWarn DataHub RaspberryPi—are related to deficiencies in access control during the processing of Wi-Fi interfaces...

USN-6493-2 hibagent update

USN-6493-1 fixed a vulnerability in hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: On Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, the hibagent package has been updated to add IMDSv2 support, as IMDSv1 uses an insecure...

USN-6493-1 hibagent update

On Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, the hibagent package has been updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is no longer recommended. In addition, on all releases, hibagent has been updated to do nothing if ODH is configured...

CVE-2023-32321

CKAN (open-source data management system) is affected by CVE-2023-32321 with multiple flaws in older CKAN releases up to 2.9.9/2.10.1. The issues include: (1) arbitrary file writes in resource_create and package_update via ResourceUploader, potentially reachable through package_create/revise/patc...

Cross-Site Scripting (XSS)

pimcore/data-hub is vulnerable to stored cross-site scripting. The vulnerability exists because the configuration values are not escaped properly which allows a malicious attacker to inject and execute arbitrary javascript...

CVE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

CVE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

CVE-2022-0955

Summary: CVE-2022-0955 is a stored Cross-site Scripting (XSS) vulnerability in Pimcore/Data-Hub prior to version 1.2.4. The Red Hat and OSV entries, along with the Pimcore advisories, describe that an admin user accessing Pimcore/Data-Hub could trigger the attack, potentially compromising cookies...

CVE-2022-0955 Cross-site Scripting (XSS) - Stored in pimcore/data-hub

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

PT-2022-13554 · Pimcore · Pimcore/Data-Hub

Name of the Vulnerable Software and Affected Versions: pimcore/data-hub versions prior to 1.2.4 Description: The issue is related to stored Cross-site Scripting XSS in the pimcore/data-hub GitHub repository. This type of attack occurs when an application stores user input data without proper...

Pimcore data-hub 跨站脚本漏洞

Pimcore data-hub is a data delivery and consumption platform from Austrian company Pimcore. There is a security vulnerability in Pimcore data-hub, no information about the vulnerability is available at this time, please keep an eye on CNNVD or vendor announcements...

CVE-2022-0955: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

Cross-site Scripting (XSS) - Stored in pimcore/data-hub

Description The pimcore/pimcore package is an open source platform that provides PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce services. stored xss vulnerability occurs when you change the value of Group at "Datahub" in the pimcore service. Proof of Concept XSS POC : " txt 1. Open the...

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297

Technical details about CVE-2020-6297 (affected product/version, root cause, exploitability) are not publicly available in the provided documents. Monitor for updates from SAP and CVE trackers.

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297: Undefined Security Weakness

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...