Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/13 1:36 a.m.10 views

GHSA-XR5H-PHRJ-8VXV Astro: Server island encrypted parameters vulnerable to cross-component replay

Impact Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots parameters, but did not bind the ciphertext to its intended component or parameter type. An attacker could replay one component's encrypted props p value as...

6.3CVSS5.8AI score0.00144EPSS
SaveExploits0References5
Rows per page
Query Builder