CVE-2024-2562

A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/rolemenu.go. The manipulation of the argument roleKey leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-2562: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/rolemenu.go. The manipulation of the argument roleKey leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2018-17369

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

PT-2018-13997

Name of the Vulnerable Software and Affected Versions springboot authority versions prior to 2017-03-06 Description An issue was discovered that allows stored XSS via the admin/role/edit endpoint, specifically through the roleKey, name, or description parameters. Recommendations For versions prio...

CVE-2018-17369: Improper Neutralization of Input During Web Page Generation

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...