Lucene search
+L

1673 matches found

osv_ghsa
osv_ghsa
•added 2025/10/10 3:31 p.m.•33 views

GHSA-RPJR-PCMR-9PPW Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/10 3:31 p.m.•18 views

EUVD-2025-33723

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/10/10 2:43 p.m.•12 views

Improper Validation of Unsafe Equivalence in Input

Overview alt-design/alt-redirect is an Alt Redirect addon, add Redirects to your site Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input via handling of query string parameters when the "Query String Strip" feature is enabled. An attacker can...

7.2CVSS5.8AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/10 2:15 p.m.•25 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS0.00229EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•5 views

CVE-2025-60868: Authentication Bypass by Spoofing

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 12:00 a.m.•4 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

5.9AI score0.00229EPSS
SaveExploits0References2
Mend
Mend
•added 2025/10/10 12:00 a.m.•2 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...

6.9CVSS5.9AI score0.00229EPSS
SaveExploits0References6
CVE
CVE
•added 2025/10/10 12:00 a.m.•30 views

CVE-2025-60868

The Alt Redirect 1.6.3 addon for Statamic contains a security vulnerability where the "Query String Strip" feature fails to consistently remove query string parameters. Specifically, the logic fails to handle case variations , encoded keys , and duplicate parameters , allowing attackers to bypass...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2008-6482

Malware in sbrugna...

4.3CVSS6.4AI score0.01458EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2009-5110

Malware in sbrugna...

10CVSS8.2AI score0.10922EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-1999-0178

Malware in sbrugna...

7.5CVSS6.4AI score0.12455EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2006-5611

Malware in sbrugna...

4.3CVSS6.4AI score0.01954EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2006-6139

Malware in sbrugna...

4.3CVSS6.4AI score0.00923EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-1999-0146

Malware in sbrugna...

7.5CVSS6.4AI score0.14935EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-5153

Malware in sbrugna...

4.3CVSS6.4AI score0.01158EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-4538

Malware in sbrugna...

4.3CVSS5.8AI score0.018EPSS
SaveExploits0References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2006-0349

Malware in sbrugna...

7.8CVSS6.4AI score0.02228EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2006-2609

Malware in sbrugna...

2.6CVSS6.4AI score0.0122EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2001-0472

Malware in sbrugna...

7.5CVSS6.4AI score0.09573EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2006-0911

Malware in sbrugna...

7.5CVSS6.4AI score0.01667EPSS
SaveExploits1References3
Rows per page
Query Builder