3 matches found
CVE-2024-7553
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB...
CVE-2024-7553
CVE-2024-7553 concerns MongoDB components (Server and relevant drivers) on Windows, due to incorrect validation of files loaded from a local untrusted directory. The flaw can enable local privilege escalation and may cause the application to execute arbitrary behavior based on untrusted file cont...
Cross-site Scripting (XSS)
getkirby/kirby is vulnerable to cross-site scripting XSS. The vulnerability is possible due to incorrect file validation via "site files" Add option while uploading an SVG file...