2 matches found
MGASA-2023-0122 Updated dino packages fix security vulnerability
When a Dino client receives a specifically crafted message from an unauthorized sender, it would use information from that message to add, update or remove entries in the user’s personal bookmark store without requiring further user interaction. CVE-2023-28686...
7.1CVSS6.5AI score0.00699EPSS
SaveExploits0References3
MGASA-2021-0401 Updated dino packages fix security vulnerability
Updated dino packages fix security vulnerability: Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators CVE-2021-33896...
5.3CVSS5.3AI score0.01766EPSS
SaveExploits0References4
20