Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2026/04/04 6:17 a.m.7 views

AVideo: Unauthenticated Information Disclosure via Missing Auth on CloneSite client.log.php

Summary The plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin. The log contains internal filesystem paths, remote server URLs, and SSH connection metadata. Details...

5.3CVSS5.9AI score0.00367EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2025/05/31 5:57 a.m.4 views

BIT-MOODLE-2024-34006 moodle: unsanitized HTML in site log for config_log_created

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

4.3CVSS6.4AI score0.00353EPSS
Exploits0References2
OSV
OSV
added 2024/05/31 9:30 p.m.10 views

GHSA-VVH5-7V3M-J3MJ Moodle Unsanitized HTML in site log for config_log_created

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

4.3CVSS4.7AI score0.00353EPSS
Exploits0References5
OSV
OSV
added 2024/05/31 9:15 p.m.18 views

CVE-2024-34006

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

4.3CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2024/05/31 9:15 p.m.12 views

CVE-2024-34006

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

4.3CVSS6.2AI score0.00353EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/31 8:36 p.m.17 views

CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

6.5AI score0.00353EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/31 8:36 p.m.25 views

CVE-2024-34006 moodle: unsanitized HTML in site log for config_log_created

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered...

6.1AI score0.00353EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/31 12:0 a.m.2 views

PT-2024-25634 · Alt Linux +1 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns the site log report, which required additional encoding of event descriptions. This encoding is necessary to ensure that any HTML in the content is displayed in...

9.8CVSS5.5AI score0.00944EPSS
Exploits1References47
Rows per page
Query Builder