Missing Authorization

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization in the assets/preview-file. An attacker can access unauthorized preview metadata by sending crafted requests with a controlled assetId parameter, allowing retrieval of...

LinkedIn Mobile Application 安全漏洞

LinkedIn Mobile Application is a mobile application from LinkedIn Corporation USA. A security vulnerability exists in LinkedIn Mobile Application version 4.1.1087.2, which stems from a failed link preview metadata update and could lead to a phishing attack...