2 matches found
GHSA-24CW-228Q-3RX9 OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
5.4CVSS0.0037EPSS
SaveExploits0References5
CVE-2023-50439
ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...
5.3CVSS6AI score0.00522EPSS
SaveExploits0References3
20