CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring...

GHSA-MVF6-3F2G-XFXF endroid/qr-code-bundle File Disclosure via logo_path query parameter

Versions of endroid/qr-code-bundle prior to 3.4.2 are affected by a security vulnerability that allows disclosure of files through the logopath query parameter. The vulnerability arises from the improper handling of non-image data as the logo, which could lead to unintended file disclosure...

PT-2024-40382 · Unknown · Endroid/Qr-Code-Bundle

Name of the Vulnerable Software and Affected Versions: endroid/qr-code-bundle versions prior to 3.4.2 Description: The issue arises from the improper handling of non-image data as the logo, which could lead to unintended file disclosure through the logo path query parameter. Recommendations: For...

CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring...

CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring...

CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring...

Heimdall 安全漏洞

Heimdall is an open source application panel and launcher for LinuxServer.io. A security vulnerability exists in LinuxServer.io Heimdall versions prior to 2.5.7 that stems from will not prevent the use of icons with non-image data...

Information Disclosure

endroid/qr-code is vulnerable to information disclosure. The logo is not validated to contain valid image data, allowing an attacker to specify a non-image data and retrieve data from non-image files...

Mozilla Firefox Source Validation Error Vulnerability

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A source validation error vulnerability exists in Mozilla Firefox versions prior to 71. The vulnerability stems from an error when handling unsuccessfully loaded images loaded data that is not an image...