Lucene search
+L

2 matches found

OSV
OSV
added 2023/11/20 9:0 p.m.67 views

GHSA-7RFG-6273-F5WP Cookies are sent to external images in rendered diff (and server side request forgery)

Impact The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference for an actually unchanged image. For this, XWiki requests all embedded images on the server side. These requests are also sent for images from other domains and include all cookies that...

9CVSS8.9AI score0.0071EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/11/20 9:0 p.m.56 views

Cookies are sent to external images in rendered diff (and server side request forgery)

Impact The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference for an actually unchanged image. For this, XWiki requests all embedded images on the server side. These requests are also sent for images from other domains and include all cookies that...

9CVSS6.7AI score0.0071EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder