DLA-2918-1 debian-edu-config - security update

Bulletin has no description...

[SECURITY] [DLA 2918-1] debian-edu-config security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2918-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 12, 2022 https://wiki.debian.org/LTS -...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

DEBIAN-CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

Privilege escalation

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

CVE-2021-20001 affects debian-edu-config prior to 2.12.16, where insecure permissions on user web shares (~/public_html) could allow privilege escalation. Debian advisories (DSA-5072-1, DLA-2918-1) document the issue and its fix; for Debian 9, the fix is in 1.929+deb9u5. Multiple feeds (NVD entry...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

[SECURITY] [DSA 5072-1] debian-edu-config security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5072-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 11, 2022 https://www.debian.org/security/faq -...

DSA-5072-1 debian-edu-config - security update

Bulletin has no description...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

PT-2022-9150

Name of the Vulnerable Software and Affected Versions debian-edu-config versions prior to 2.12.16 Description It was discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend, configured insecure permissions for the user web shares /public html, which could...

CVE-2021-20001: Incorrect Default Permissions

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

Privilege Escalation

debian-edu-config is vulnerable to privilege escalation. The vulnerability exists due to lack of validation of the authorization in the configuration files...

edu-science.com Improper Access Control vulnerability OBB-2341203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@epam/draft-rte (>=4.0.0--beta.10.0, <=5.7.4), @epam/edu-core-routing (>=3.48.0-beta.1, <=4.6.2-select-all-fix.1) +20 more potentially affected by CVE-2020-28500 via lodash.trimend (>=4.5.0, <=4.5.1)

lodash.trimend NPM version =4.5.0, =4.0.0--beta.10.0, =3.48.0-beta.1, =5.3.0-rc.0, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =4.6.0-alpha.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =5.0.0-alpha.2, =3.48.0-beta.1, =5.0.0-alpha.0, =5.6.23 and more Sourc...

svnserver.informatik.kit.edu Cross Site Scripting vulnerability OBB-2289171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

login.fitnyc.edu Cross Site Scripting vulnerability OBB-2277937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...