8 matches found
CVE-2026-116004
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
EUVD-2026-109330
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2026-116004
A security vulnerability exists in onyx-dot-app Onyx up to version 5.0.0 . The flaw resides in an unknown function within the file web/src/app/craft/components/output-panel/PreviewTab.tsx. This vulnerability allows for Remote Cross-Site Scripting (XSS) . The exploit has been disclosed publicly an...
CVE-2026-116004 onyx-dot-app Onyx PreviewTab.tsx cross site scripting
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2026-116004 onyx-dot-app Onyx PreviewTab.tsx cross site scripting
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
PT-2026-122935
Name of the Vulnerable Software and Affected Versions onyx-dot-app Onyx versions prior to 5.0.1 Description A remote cross site scripting issue exists within an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. Cross site scripting is a technique where malicio...
CVE-2025-51479: Authorization Bypass Through User-Controlled Key
Authorization bypass in updateusergroup in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH requests to the /api/manage/admin/user-group/id endpoint, bypassing intended curator-group assignment checks...
CVE-2025-51479
Authorization bypass in updateusergroup in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH requests to the /api/manage/admin/user-group/id endpoint, bypassing intended curator-group assignment checks...