Lucene search
+L

1191 matches found

OSV
OSV
added 2025/10/10 3:31 p.m.19 views

GHSA-RPJR-PCMR-9PPW Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.9AI score0.00213EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/10/10 3:31 p.m.15 views

Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.9AI score0.00213EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2025/10/10 3:31 p.m.10 views

EUVD-2025-33723

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS6.3AI score0.00213EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/10/10 2:43 p.m.5 views

Improper Validation of Unsafe Equivalence in Input

Overview alt-design/alt-redirect is an Alt Redirect addon, add Redirects to your site Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input via handling of query string parameters when the "Query String Strip" feature is enabled. An attacker can...

7.2CVSS6.7AI score0.00213EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/10 2:15 p.m.13 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS0.00213EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/10 12:0 a.m.3 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.4AI score0.00213EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/10 12:0 a.m.18 views

CVE-2025-60868

The CVE-2025-60868 entry concerns the Alt Redirect 1.6.3 addon for Statamic. The vulnerability arises from incomplete query string parameter cleanup when the Query String Strip option is enabled: case variations, encoded keys, and duplicate parameters are not consistently removed, potentially ena...

6.5CVSS6.4AI score0.00213EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-1980

Malware in sbrugna...

2.6CVSS6.3AI score0.0195EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-2171

Malware in sbrugna...

4.3CVSS6.4AI score0.03686EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2006-7131

Malware in sbrugna...

4.3CVSS6.4AI score0.01107EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2006-5153

Malware in sbrugna...

4.3CVSS6.4AI score0.01128EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-6482

Malware in sbrugna...

4.3CVSS6.4AI score0.01458EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2007-2620

Malware in sbrugna...

6.8CVSS6.1AI score0.02327EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2006-0349

Malware in sbrugna...

7.8CVSS6.4AI score0.02228EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-7409

Malware in sbrugna...

6.1CVSS6.2AI score0.02606EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-5611

Malware in sbrugna...

4.3CVSS6.4AI score0.01948EPSS
SaveExploits2References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2005-1255

Malware in sbrugna...

5CVSS6.3AI score0.12499EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-1084

Malware in sbrugna...

4.3CVSS6.3AI score0.01633EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-1999-0178

Malware in sbrugna...

7.5CVSS6.4AI score0.12455EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-9945

Malware in sbrugna...

6.1CVSS6.3AI score0.00655EPSS
SaveExploits0References2
Rows per page
Query Builder