1589 matches found
CVE-2023-23928 reason-jose ignores signature checks
reason-jose is a JOSE implementation in ReasonML and OCaml.Jose.Jws.validate does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass...
CVE-2023-23928 reason-jose ignores signature checks
reason-jose is a JOSE implementation in ReasonML and OCaml.Jose.Jws.validate does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass...
CVE-2023-23928
CVE-2023-23928 concerns reason-jose, a JOSE implementation in ReasonML/OCaml, where Jose.Jws.validate fails to verify HS256 signatures. This allows tampering of JWS headers/payloads when additional server-side checks are absent, potentially enabling authorization bypass or privilege escalation fo...
CVE-2022-46241
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2023-0258
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The manipulation of the argument Reason with the input "prompt1 leads to cross site scripting...
Online Food Ordering System 跨站脚本漏洞
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which originates from the lack of effective filtering and escaping of user-supplied data by the parameter Reason of some unknown functions of the component...
PT-2023-16118 · Sourcecodester · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A problematic issue was found in the Category List Handler component, where the manipulation of the Reason argument with the input "prompt1 leads to cross-site scripting. The...
CVE-2022-46335
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2022-43796
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43787
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-43790
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
Design/Logic Flaw
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
Design/Logic Flaw
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
Design/Logic Flaw
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
CVE-2022-46669
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2022-4659
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2021-23075
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...