Lucene search
+L

10 matches found

NVD
NVD
•added 2025/04/23 5:16 p.m.•22 views

CVE-2025-1522

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS0.0063EPSS
SaveExploits0References2
Mend
Mend
•added 2025/04/23 4:45 p.m.•7 views

CVE-2025-1522

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS0.0063EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/23 12:00 a.m.•19 views

PostHog 代码问题漏洞

PostHog is an all-in-one open source platform from PostHog Open Source. A code issue vulnerability exists in PostHog that stems from the databaseschema method implementation not validating the URI, which could lead to server-side request forgery and information disclosure...

7.1CVSS6.8AI score0.0063EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/23 12:00 a.m.•6 views

CVE-2025-1522: Server-Side Request Forgery (SSRF)

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS6.9AI score0.0063EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/02/25 12:00 a.m.•22 views

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the databaseschema method. The issue results from the lack of proper...

7.1CVSS6AI score0.0063EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/22 8:24 p.m.•1 views

CVE-2024-9710

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

8.3CVSS0.00677EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/22 8:24 p.m.•39 views

CVE-2024-9710 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS0.00677EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/22 8:24 p.m.•16 views

CVE-2024-9710 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS6.4AI score0.00677EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/22 8:24 p.m.•87 views

CVE-2024-9710

PostHog CVE-2024-9710 describes a Server-Side Request Forgery and information disclosure in the database_schema method. The flaw arises from insufficient validation of a URI before resource access, enabling an attacker with authentication to disclose sensitive data and potentially execute code in...

8.3CVSS6.8AI score0.00677EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•6 views

CVE-2024-9710: Server-Side Request Forgery (SSRF)

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

8.3CVSS7.1AI score0.00677EPSS
SaveExploits0References1
Rows per page
Query Builder