Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 2:51 p.m.3 views

CVE-2020-15097

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...

9.1CVSS6.4AI score0.00465EPSS
Exploits0
OSV
OSV
added 2021/02/02 6:15 p.m.7 views

CVE-2020-15097

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...

9.1CVSS6.4AI score
Exploits0References2
NVD
NVD
added 2021/02/02 6:15 p.m.6 views

CVE-2020-15097

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...

9.1CVSS0.00465EPSS
Exploits0References2
Prion
Prion
added 2021/02/02 6:15 p.m.13 views

Path traversal

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...

6.4CVSS9AI score0.00465EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/02 6:15 p.m.1 views

CVE-2020-15097

loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...

9.1CVSS5.4AI score0.00465EPSS
Exploits0References3
CVE
CVE
added 2021/02/02 5:35 p.m.39 views

CVE-2020-15097

CVE-2020-15097 applies to loklak: a path traversal vulnerability due to insufficient input validation in loklak server APIs, enabling reading admin configuration/files on the host and potentially writing user-controlled content to admin files. Impact is limited to systems running loklak prior to ...

9.1CVSS9.2AI score0.00465EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.4 views

loklak path traversal vulnerability

Loklak Server is a server-side application from the Loklak team for collecting text information from multiple sources. loklak suffers from a path traversal vulnerability that stems from insufficient input validation leading to a directory traversal vulnerability. An attacker can exploit this...

9.1CVSS7.3AI score0.00465EPSS
Exploits0References3
Rows per page
Query Builder