Lucene search
+L

3 matches found

OSV
OSV
added 2024/06/05 6:33 p.m.21 views

GHSA-G4XV-R3QW-V3Q2 typo3 Information Disclosure Security Note

Due to reports it has been validated that internal workspaces in Neos are accessible without authentication. Some users assumed this is a planned feature but it is not. A workspace preview should be an additional feature with respective security measures in place. Note that this only allows readi...

6.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/05/17 10:54 p.m.22 views

Neos Information Disclosure Security Note

Due to reports it has been validated that internal workspaces in Neos are accessible without authentication. Some users assumed this is a planned feature but it is not. A workspace preview should be an additional feature with respective security measures in place. Note that this only allows readi...

6.8AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.8 views

PT-2024-40044 · Neos · Neos

Name of the Vulnerable Software and Affected Versions: Neos affected versions not specified Description: The issue allows unauthorized access to internal workspaces in Neos without authentication. This means that internal workspaces, which are non-public and do not have an owner, can be viewed by...

7.5CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder