Directory traversal

nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...

CVE-2023-25307

nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...

CVE-2023-25307

nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...

CVE-2023-25307

CVE-2023-25307 affects the command‑line tool nothub/mrpack-install, specifically versions

CVE-2023-25307: Improper Limitation of a Pathname to a Restricted Directory

nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...

mrpack-install 路径遍历漏洞

mrpack-install is a cli application for installing Minecraft servers and Modrinth modpacks by Florian H. Individual developer. A security vulnerability exists in mrpack-install version 0.16.2 and earlier versions, which stems from the presence of a path traversal vulnerability...

fuadmin vulnerable to insecure file upload

funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...

GHSA-5M3M-Q8CQ-77G4 fuadmin vulnerable to insecure file upload

funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...

CVE-2023-36097

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...

Design/Logic Flaw

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...

CVE-2023-36097

CVE-2023-36097 affects FunAdmin v3.3.2 and v3.3.3. The issue is an insecure file upload in the plugin installation process, caused by insufficient validation/restrictions on uploaded plugin files. This vulnerability allows an attacker to upload malicious files via the local install mechanism, pot...

PT-2023-25428

Name of the Vulnerable Software and Affected Versions funadmin versions 3.3.2 through 3.3.3 Description The issue concerns insecure file upload via the plugins install. Recommendations For versions 3.3.2 and 3.3.3, consider disabling the plugins install feature until a patch is available. Restric...

CVE-2023-36097

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...

Ubuntu: Security Advisory (USN-6170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2784

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

Code injection

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...

CVE-2023-2784

Mattermost suffers from an authorization issue in the Apps install flow: the server does not verify whether the requestor is a sysadmin before accepting install requests to Apps, enabling regular users to initiate installation via the Apps API endpoint. This is documented across multiple sources ...

CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps...