Lucene search
+L

6 matches found

OSV
OSV
•added 2026/04/17 2:15 p.m.•18 views

CVE-2026-6493 lukevella rallly Reset Password reset-password-form.tsx cross site scripting

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/locale/auth/reset-password/components/reset-password-form.tsx of the component Reset Password Handler. Executing a manipulation of the argument redirectTo can lead to cross site...

5.1CVSS4AI score
SaveExploits0References9
CVE
CVE
•added 2026/04/17 2:15 p.m.•41 views

CVE-2026-6493

A vulnerability in lukevella rallly

5.1CVSS3.5AI score0.00356EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/04/17 2:15 p.m.•44 views

CVE-2026-6493 lukevella rallly Reset Password reset-password-form.tsx cross site scripting

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/locale/auth/reset-password/components/reset-password-form.tsx of the component Reset Password Handler. Executing a manipulation of the argument redirectTo can lead to cross site...

5.1CVSS0.00356EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/04/17 2:15 p.m.•13 views

CVE-2026-6493

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/locale/auth/reset-password/components/reset-password-form.tsx of the component Reset Password Handler. Executing a manipulation of the argument redirectTo can lead to cross site...

5.1CVSS3.9AI score0.00356EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/17 2:15 p.m.•13 views

CVE-2026-6493 lukevella rallly Reset Password reset-password-form.tsx cross site scripting

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/locale/auth/reset-password/components/reset-password-form.tsx of the component Reset Password Handler. Executing a manipulation of the argument redirectTo can lead to cross site...

5.1CVSS3.5AI score0.00356EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/17 12:00 a.m.•3 views

CVE-2026-6493: Improper Neutralization of Input During Web Page Generation

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/locale/auth/reset-password/components/reset-password-form.tsx of the component Reset Password Handler. Executing a manipulation of the argument redirectTo can lead to cross site...

5.1CVSS3.4AI score0.00356EPSS
SaveExploits0References3
Rows per page
Query Builder