10106 matches found
GHSA-Q386-W6FG-GMGP XML External Entity (XXE) vulnerability in the XML data handler
TL;DR This vulnerability only affects Kirby sites that use the Xml data handler e.g. Data::decode$string, 'xml' or the Xml::parse method in site or plugin code. The Kirby core does not use any of the affected methods. If you use an affected method and cannot rule out XML input controlled by an...
WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.4.3 is vulnerable to Server Side Request Forgery (SSRF)
Software AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE N/A Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PS...
CVE-2023-3981
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to server-side request forgery due to [CVE-2023-28155]
Summary Node.js module Request is used by IBM App Connect Enterprise Certified Container operands for both internal and external HTTP calls. IBM App Connect Enterprise Certified Container operands are vulnerable to server-side request forgery. This bulletin provides patch information to address t...
PT-2023-27117 · Omeka · Omeka-S
Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.2 Description: The issue is related to Server-Side Request Forgery SSRF in the omeka/omeka-s GitHub repository. This allows an attacker to trick the server into making requests to arbitrary domains,...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets h...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163 Poc of SSRF for Request-Baskets CVE-2023-27163...
SUSE-SU-2023:2975-1 Security update for xmltooling
This update for xmltooling fixes the following issues: - CVE-2023-36661: Fixed a server-side-request-forgery SSRF vulnerability bsc1212359...
Trend Micro Apex Central modDeepSecurity Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modDeepSecurity module. The issue results from the lack of proper...
Ubuntu: Security Advisory (USN-6243-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6243-1: Graphite-Web vulnerabilities
It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information. This issue on...
Server-Side Request Forgery (SSRF)
gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability allows an attack to occur through the repository mirroring feature in gitlab resulting in a blind SSRF...
Server-Side Request Forgery (SSRF)
gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists because the shared address spaces are not blocked for requests, allowing an attacker to cause blind SSRF attacks...
Server side request forgery (ssrf)
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are...