EUVD-2019-2138

Malware in sbrugna...

CVE-2019-10085

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...

XSS vulnerability when listing users on add & modify server pages.

Impact An XSS vulnerability exists in versions of Pterodactyl Panel before 0.7.19. Affected versions do not properly sanitize account names before rendering them to the dropdown selector in the admin area when creating or modifying a server. Patches This XSS has been addressed in 0.7.19 and will ...

PT-2020-21053

Name of the Vulnerable Software and Affected Versions Pterodactyl Panel versions prior to 0.7.19 Description A cross-site scripting XSS issue exists due to improper sanitization of account names before rendering them to the dropdown selector in the admin area when creating or modifying a server...

CVE-2019-10085

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...

CVE-2019-10085

The CVE-2019-10085 entry concerns Apache Allura versions prior to 1.11.0 with a stored XSS vulnerability in the user dropdown selector on the ticket creation/editing page. The issue arises from the vulnerability existing on that UI element, enabling malicious input to be stored and potentially ex...

CVE-2019-10085

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...

CVE-2019-10085: Improper Neutralization of Input During Web Page Generation

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page...

PT-2019-11424

Name of the Vulnerable Software and Affected Versions: Apache Allura versions prior to 1.11.0 Description: A stored XSS issue exists in the user dropdown selector when creating or editing tickets. The XSS executes when a user interacts with the dropdown on the affected page. Recommendations: For...