21 matches found
Mosparo < 1.0.2 - Open Redirect
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. id: CVE-2023-5375 info: name: Mosparo 1.0.2 - Open Redirect author: shankaracharya severity: medium description: | Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. impact: | Unauthenticated attackers can exploit...
CVE-2026-41195 mosparo: Rule package source URL stored SSRF enables internal HTTP probing
mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker-controlled URL that the server later fetches. Because the server follows http/https redirects and...
CVE-2026-41195
mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker-controlled URL that the server later fetches. Because the server follows http/https redirects and...
CVE-2026-41195 mosparo: Rule package source URL stored SSRF enables internal HTTP probing
mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker-controlled URL that the server later fetches. Because the server follows http/https redirects and...
CVE-2026-41195
In mosparo, a vulnerability exists prior to version 1.4.13 where a project member with the editor role can abuse the automatic rule package source URL feature to store an attacker-controlled URL that the server fetches. The server follows HTTP/HTTPS redirects and does not restrict private or loop...
mosparo 代码问题漏洞
Mosparo is a modern spam protection software developed under open source. Versions of Mosparo prior to 1.4.13 had code vulnerabilities. These vulnerabilities stemmed from the automatic rule package source URL feature, which allowed project members with editor roles to store URLs controlled by...
EUVD-2023-57977
Malicious code in bioql PyPI...
CVE-2023-5687
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5375
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5687
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5687
CVE-2023-5687 describes a CSRF in mosparo/mosparo prior to 1.0.3. Public docs confirm a CSRF issue in logout-related flows (e.g., PoC in Huntr), with CVSS scores (NVD 8.8 High) and user interaction required. Remediation is to upgrade to version 1.0.3 or later; other sources reference logout-featu...
mosparo Cross-Site Request Forgery Vulnerability
mosparo is modern spam protection. A cross-site request forgery vulnerability exists in mosparo versions prior to 2.2.2, which stems from a cross-site request forgery vulnerability in the logout feature...
CVE-2023-5375
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...
CVE-2023-5375 Open Redirect in mosparo/mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...