547 matches found
CVE-2021-4430 Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure
A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...
CVE-2021-4430
CVE-2021-4430 affects Ortus Solutions ColdBox Elixir 3.1.6, specifically the ENV Variable Handler’s file src/defaultConfig.js, leading to information disclosure. A fix is available in ColdBox Elixir 3.1.7; the patch is identified as a3aa62daea2e44c76d08d1eac63768cd928cd69e, per the vulnerability ...
CVE-2021-4430 Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure
A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...
CVE-2021-4430: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address th...
PT-2023-12543
Name of the Vulnerable Software and Affected Versions Ortus Solutions ColdBox Elixir version 3.1.6 Description A problematic vulnerability has been found in Ortus Solutions ColdBox Elixir, affecting the ENV Variable Handler component, specifically the file src/defaultConfig.js. This issue leads t...
Ortus Solutions ColdBox Elixir Information Disclosure Vulnerability
Ortus Solutions ColdBox Elixir is a professional open source software from Ortus Solutions that provides custom development, training, server tuning, security hardening, code review, professional support and guidance. An information disclosure vulnerability exists in Ortus Solutions ColdBox Elixi...
Pow security breach
Pow is an open source, complete authentication and user management library built into Elixir that works out-of-the-box for Phoenix and Plug-based applications while being fully customizable. A security vulnerability exists in Pow versions 1.0.14 through 1.0.34, which stems from the vulnerability ...
suc_keditor (0.1.5) potentially affected by CVE-2021-32851 via mind-elixir (0.9.6)
mind-elixir NPM version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on mind-elixir and may be impacted: - suckeditor 0.1.5 Source cves: CVE-2021-32851 Source advisory: OSV:GHSA-M22Q-97P5-79V2...
Mind-elixir Cross-site Scripting vulnerability
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
GHSA-M22Q-97P5-79V2 Mind-elixir Cross-site Scripting vulnerability
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
CVE-2021-32851
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
CVE-2021-32851
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
Cross site scripting
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
CVE-2021-32851 jQuery MiniColors vulnerable to Cross-site Scripting
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
CVE-2021-32851: Improper Neutralization of Input During Web Page Generation
Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...
CVE-2021-32851
Mind-elixir Cross-site Scripting vulnerability (CVE-2021-32851) affects Mind-elixir core prior to version 0.18.1, where untrusted menu handling can lead to XSS. The issue is fixed in 0.18.1. Affected scope includes Mind-elixir versions before 0.18.1; remediation is to upgrade to 0.18.1 or later. ...
Mind-elixir 跨站脚本漏洞
Mind-elixir is a framework-agnostic mind mapping core from the individual developers of ssshooter. A cross-site scripting vulnerability exists in versions of Mind-elixir prior to 0.18.1, which stems from a susceptibility to cross-site scripting when dealing with untrusted menus...
PT-2023-12183 · Unknown · Mind-Elixir
Name of the Vulnerable Software and Affected Versions: Mind-elixir versions prior to 0.18.1 Description: The issue is related to cross-site scripting when handling untrusted menus in Mind-elixir, a free, open source mind map core. Recommendations: For versions prior to 0.18.1, update to version...
ecto 安全漏洞
ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security vulnerability exists in ecto version 2.2.0, which stems from the lack of some kind of protection mechanism...
elixir-fitness.com Cross Site Scripting vulnerability OBB-3134532
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...