Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:15 a.m.1 views

CVE-2023-32303

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in...

5.5CVSS6.8AI score0.00062EPSS
Exploits0References1
Prion
Prion
added 2023/05/12 9:15 p.m.14 views

Design/Logic Flaw

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in...

1.7CVSS5.4AI score0.00062EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/05/12 8:55 p.m.13 views

CVE-2023-32303 Planet's secret file is created with excessive permissions

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in...

5.2CVSS5.4AI score0.00062EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/05/12 8:55 p.m.12 views

CVE-2023-32303 Planet's secret file is created with excessive permissions

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in...

5.2CVSS5.6AI score0.00062EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/05/12 8:55 p.m.11 views

CVE-2023-32303 Planet's secret file is created with excessive permissions

Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This issue was patched in...

5.2CVSS5.4AI score0.00062EPSS
Exploits0References3
OSV
OSV
added 2009/09/18 10:30 a.m.5 views

CVE-2009-2937

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

5.4AI score
Exploits0References10
Rows per page
Query Builder