Lucene search
+L

9 matches found

GithubExploit
GithubExploit
•added 2025/10/22 9:41 p.m.•326 views

Exploit for Path Traversal in Wordpress

Как пользоваться Сохраните файл как checkcve-20...

6.1CVSS7AI score0.79527EPSS
SaveExploits7
RedhatCVE
RedhatCVE
•added 2025/05/23 4:53 a.m.•19 views

CVE-2023-2784

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

6.5CVSS6.8AI score0.00322EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/13 5:15 p.m.•19 views

CVE-2023-20135

A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use TOCTOU race condition when an install query regarding an ISO imag...

7CVSS6.1AI score0.00093EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/16 8:41 a.m.•79 views

CVE-2023-2784

Mattermost suffers from an authorization issue in the Apps install flow: the server does not verify whether the requestor is a sysadmin before accepting install requests to Apps, enabling regular users to initiate installation via the Apps API endpoint. This is documented across multiple sources ...

6.5CVSS5.3AI score0.00322EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/16 8:41 a.m.•19 views

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

4.2CVSS6.8AI score0.00322EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/16 8:41 a.m.•26 views

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

4.2CVSS6.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/06/16 8:41 a.m.•39 views

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

4.2CVSS6.6AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/06/16 12:00 a.m.•7 views

PT-2023-21367

Name of the Vulnerable Software and Affected Versions Mattermost affected versions not specified Description The issue allows a regular user to send install requests to the Apps because it fails to verify if the requestor is a sysadmin or not before allowing install requests. Recommendations At t...

6.5CVSS0.00322EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/16 12:00 a.m.•4 views

CVE-2023-2784: Missing Authorization

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

6.5CVSS6.6AI score0.00322EPSS
SaveExploits0References3
Rows per page
Query Builder