CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2025/04/23 5:16 p.m.•8 views

CVE-2025-1522

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS0.00208EPSS

Exploits0References2

CNNVD•added 2025/04/23 12:0 a.m.•2 views

PostHog 代码问题漏洞

PostHog is an all-in-one open source platform from PostHog Open Source. A code issue vulnerability exists in PostHog that stems from the databaseschema method implementation not validating the URI, which could lead to server-side request forgery and information disclosure...

7.1CVSS6.8AI score0.00208EPSS

Exploits0References2

Zero Day Initiative•added 2025/02/25 12:0 a.m.•10 views

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the databaseschema method. The issue results from the lack of proper...

7.1CVSS6AI score0.00208EPSS

Exploits0References1

CVE•added 2024/11/22 8:24 p.m.•61 views

CVE-2024-9710

PostHog CVE-2024-9710 describes a Server-Side Request Forgery and information disclosure in the database_schema method. The flaw arises from insufficient validation of a URI before resource access, enabling an attacker with authentication to disclose sensitive data and potentially execute code in...

8.3CVSS6.8AI score0.01203EPSS

Exploits0References2Affected Software1