Lucene search
+L

8 matches found

Cvelist
Cvelist
•added 2026/08/09 2:30 a.m.•45 views

CVE-2026-19327 abracadabra50 claude-sesh enricher.ts enrichSession path traversal

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

5.3CVSS0.00172EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/08/09 2:30 a.m.•20 views

CVE-2026-19327

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

5.3CVSS5.4AI score0.00172EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/09 2:30 a.m.•10 views

CVE-2026-19327 abracadabra50 claude-sesh enricher.ts enrichSession path traversal

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

5.3CVSS5.3AI score0.00172EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•1 views

CVE-2026-19327: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

5.3CVSS5.4AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/09 12:00 a.m.•14 views

PT-2026-69250

Name of the Vulnerable Software and Affected Versions abracadabra50 claude-sesh version 1.0.0 Description A flaw in the enrichSession function within getEnrichedData located in the src/services/enricher.ts file allows for path traversal. This occurs when the sessionId argument is manipulated. Pat...

5.3CVSS5.6AI score0.00172EPSS
SaveExploits0References12
OSV
OSV
•added 2021/10/22 6:01 p.m.•29 views

CLSA-2021-1634925704 Fixed CVE-2021-23240 in sudo

sudo-1.8.6p3-CVE-2021-23240-2.patch: fixed issue with credentials management in sudoedit - sudo-1.8.6p3-CVE-2021-23240-3.patch: fixed issue with origin file removal in sesh...

7.8CVSS7.1AI score0.01066EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/07 9:30 a.m.•17 views

CLSA-2021-1625650209 Fix of CVE: CVE-2021-23240

sudo-1.8.6p3-CVE-2021-23240-2.patch: fixed issue with credentials management in sudoedit - sudo-1.8.6p3-CVE-2021-23240-3.patch: fixed issue with origin file removal in sesh...

7.8CVSS7.1AI score0.01066EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2021/01/11 9:26 p.m.•50 views

CVE-2021-23240

A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux is enabled, this flaw allows a malicious user with sudoedit permissions to set the owner of an arbitrary file to the user ID of the target user, potentially leading...

7.8CVSS1.7AI score0.01066EPSS
SaveExploits1References4
Rows per page
Query Builder