Lucene search
+L

27 matches found

Github Security Blog
Github Security Blog
added 2022/12/27 12:30 p.m.29 views

Oxidized Web vulnerable to Cross-site Scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS2.2AI score0.00531EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2022/12/27 10:15 a.m.27 views

CVE-2019-25088

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS0.00531EPSS
SaveExploits0References4
Prion
Prion
added 2022/12/27 10:15 a.m.18 views

Cross site scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

4.9CVSS5.3AI score0.00531EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2022/12/27 9:41 a.m.70 views

CVE-2019-25088

The CVE-2019-25088 issue affects ytti Oxidized Web, specifically the file lib/oxidized/web/views/conf_search.haml. The root cause is manipulation of the to_research argument, which leads to cross-site scripting. The vulnerability can be triggered remotely, exposing users to XSS via crafted input....

5.4CVSS4.3AI score0.00531EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.5 views

Oxidized Web 跨站脚本漏洞

Oxidized Web is a Web UI + RESTful API for Oxidized. Oxidized Web suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter toresearch can lead to cross-site scripting...

5.4CVSS4.2AI score0.00531EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/27 12:0 a.m.6 views

PT-2022-8300 · Unknown · Ytti Oxidized Web

Name of the Vulnerable Software and Affected Versions: ytti Oxidized Web affected versions not specified Description: A vulnerability was found in ytti Oxidized Web, classified as problematic. The issue affects an unknown function of the file lib/oxidized/web/views/conf search.haml. The...

5.4CVSS4.3AI score0.00531EPSS
SaveExploits0References11
RubySec
RubySec
added 2022/12/27 12:0 a.m.20 views

Oxidized Web vulnerable to Cross-site Scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS2.2AI score0.00531EPSS
SaveExploits0References1
Rows per page
Query Builder