Incorrect Authorization

apacheairflow is vulnerable to Incorrect Authorization. The vulnerability is due to in forms.py as there is no read-only validation on critical fields, this allows authenticated users with DAG-view permissions to modify DAG run details. An attacker can use this for alter details such as...

CVE-2023-38759

CVE-2023-38759 describes a Cross-Site Request Forgery (CSRF) vulnerability in the wger Project, Workout Manager version 2.2.0a3. The issue enables a remote attacker to gain privileges via the user-management features, affecting multiple components/files (e.g., gym.py, reset_user_password.html, ov...

Weak Password Requirements

modoboa has Weak Password Requirements. The vulnerability exists in the clean function of forms.py due to lack of check conditions which allows an attacker to set unsafe passwords and bypass the password requirements...