EUVD-2023-1744

Malicious code in bioql PyPI...

GHSA-86H2-2G4G-29QX avo possible unsafe reflection / partial DoS vulnerability

Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...

avo possible unsafe reflection / partial DoS vulnerability

Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the "polymorphic field" implementation, due to the lack of validation of user input when updating or creating a new polymorphic resource. An attacker can exploit this vulnerability by manipulating the class...

avo possible unsafe reflection / partial DoS vulnerability

Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...

Input validation

Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes...

CVE-2023-34102 Possible unsafe reflection / partial denial of service in avo

Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes...

Avo 输入验证错误漏洞

Avo is an open source ruby on rails admin panel creation framework from Avo Open Source. An input validation error vulnerability exists in Avo version 2.33.2, version 3.0.0.pre12. The vulnerability stems from a user storing input and updating a record class using a polymorphic field type that doe...