24 matches found
EUVD-2022-4776
Malicious code in bioql PyPI...
CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
Code injection
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848 Business Logic Errors in erudika/para
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848 Business Logic Errors in erudika/para
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1848
CVE-2022-1848 affects the Erudika Para project prior to version 1.45.11. Multiple connected sources describe a business logic error, including a race condition in com.erudika:para-core (validateObject) that can allow a user to abuse account/app-related logic. This is documented across sources (Gi...
Erudika Para security vulnerabilities
Erudika Para is a command line interface from Erudika Bulgaria. A security vulnerability exists in Erudika Para prior to version 1.45.11 that stems from a business logic error...
PT-2022-14166
Name of the Vulnerable Software and Affected Versions erudika/para versions prior to 1.45.11 Paraara versions prior to 1.46.0 Description The issue concerns business logic errors in the GitHub repository erudika/para and Paraara. A user can create more than one app, even after they reach the app...
CVE-2022-1848: Undefined Security Weakness
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
Erudika Para Cross-Site Scripting Vulnerability
Erudika Para is a command-line interface from the Bulgarian company Erudika. cross-site scripting vulnerability exists in versions prior to Erudika Para v1.45.11, which stems from a function in Utils.java that lacks filtering and escaping for user data. An attacker could use this vulnerability to...
GHSA-PHVW-R25P-8XV7 Cross-site Scripting in com.erudika:para-core
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
Cross-site Scripting in com.erudika:para-core
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
CVE-2022-1782
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
CVE-2022-1782
CVE-2022-1782 affects the GitHub repo erudika/para, with a Cross-site Scripting (XSS) vulnerability in versions prior to v1.45.11. The root cause is described as a data handling flaw in the code path (Utils.java) that fails to filter/escape user input, enabling an attacker to inject JavaScript. I...