Apache Airflow 代码问题漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. Apache Airflow 2.4.1 and earlier versions have a code issue vulnerability that stems from the failure of deactivated users to prevent authenticated users from continuing to use t...

CVE-2016-4427

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...

Design/Logic Flaw

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...

CVE-2016-4427

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...

CVE-2016-4427: Improper Access Control

In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...

PT-2022-7864 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip versions prior to 1.3.12 Description: The issue allows deactivated users to access messages when Single Sign-On SSO is enabled. Recommendations: For versions prior to 1.3.12, update to version 1.3.12 or later to resolve the issue...

8x8 Bounty: connect.8x8.com: deactivated users remain access to /api/v1/users/UUID/roles

Vulnerability description not provided...

Cross-Site Request Forgery (CSRF) in changeweb/unifiedtransform

✍️ Description When you don't set the SameSite attribute of cookies the browsers have special act in front of this issue.I mean set default value on it chrome and chromium based browsers set the attribute "Lax" that mean if you do add/delete/alter operation in a get HTTP request then your site mor...

Filter Subscription emails should not be sent to deactivated users.

h3. Summary Email Filter Subscriptions are still sent after an user is marked as deactivated. h3. Steps to Reproduce Create a user belonging to jira-users group Deactivate the user Create a filter and subscribed to jira-users group Filter used: issuekey in issueHistory ORDER BY lastViewed DESC...