Ubuntu: Security Advisory (USN-6008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Exo vulnerability (USN-6008-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6008-1 advisory. It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cau...

USN-6008-1: Exo vulnerability

It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution...

USN-6008-1 exo vulnerability

It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution...

CVE-2022-4902

A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible ...

Cross site scripting

A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible ...

CVE-2022-4902 eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting

A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible ...

CVE-2022-4902

The CVE-2022-4902 entry concerns the eXo Chat Application, specifically the Mention Handler within ExoChatMessageComposer.vue. The issue is a cross-site scripting vulnerability in an unknown function of that component, exploitable remotely. The affected versions are prior to 3.3.0-20220417, with ...

CVE-2022-4902 eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting

A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible ...

PT-2023-15911 · Exo · Exo Chat Application

Name of the Vulnerable Software and Affected Versions: eXo Chat Application versions prior to 3.3.0-20220417 Description: A problematic issue has been found in the eXo Chat Application, affecting an unknown function of the Mention Handler component in the file...

eXo Chat Application 跨站脚本漏洞

Chat Application is an open source instant messaging application for the eXo Platform. A cross-site scripting vulnerability exists in eXo Chat Application. An attacker could exploit this vulnerability to execute cross-site scripting...

exo-terra.com Cross Site Scripting vulnerability OBB-3162867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2022-0238)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated exo packages fix security vulnerability

Changed to prevent executing possibly malicious .desktop files from online sources ftp://, http:// etc...

MGASA-2022-0238 Updated exo packages fix security vulnerability

Changed to prevent executing possibly malicious .desktop files from online sources ftp://, http:// etc...

Debian: Security Advisory (DLA-3056-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3056-1] exo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3056-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 22, 2022 https://wiki.debian.org/LTS -...

Debian DLA-3056-1 : exo - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3056 advisory. - XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. CVE-2022-32278 Note that Nessus ha...

DLA-3056-1 exo - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5164-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...