Lucene search
+L

27 matches found

OSV
OSV
added 2022/12/27 12:30 p.m.13 views

GHSA-8QWH-RM6C-JV96 Oxidized Web vulnerable to Cross-site Scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS5.1AI score0.00531EPSS
SaveExploits0References7
NVD
NVD
added 2022/12/27 10:15 a.m.30 views

CVE-2019-25088

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS0.00531EPSS
SaveExploits0References4
Prion
Prion
added 2022/12/27 10:15 a.m.25 views

Cross site scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

4.9CVSS5.3AI score0.00531EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2022/12/27 9:41 a.m.80 views

CVE-2019-25088

The CVE-2019-25088 issue affects ytti Oxidized Web, specifically the file lib/oxidized/web/views/conf_search.haml. The root cause is manipulation of the to_research argument, which leads to cross-site scripting. The vulnerability can be triggered remotely, exposing users to XSS via crafted input....

5.4CVSS4.3AI score0.00531EPSS
SaveExploits0References4Affected Software1
RubySec
RubySec
added 2022/12/27 12:00 a.m.21 views

Oxidized Web vulnerable to Cross-site Scripting

A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/confsearch.haml. The manipulation of the argument toresearch leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS2.2AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/27 12:00 a.m.10 views

PT-2022-8300 · Unknown · Ytti Oxidized Web

Name of the Vulnerable Software and Affected Versions: ytti Oxidized Web affected versions not specified Description: A vulnerability was found in ytti Oxidized Web, classified as problematic. The issue affects an unknown function of the file lib/oxidized/web/views/conf search.haml. The...

5.4CVSS4.3AI score0.00531EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.9 views

Oxidized Web 跨站脚本漏洞

Oxidized Web is a Web UI + RESTful API for Oxidized. Oxidized Web suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter toresearch can lead to cross-site scripting...

5.4CVSS4.2AI score0.00531EPSS
SaveExploits0References5
Rows per page
Query Builder