3 matches found
GHSA-F7H5-C625-3795 Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints...
8.9CVSS5.9AI score0.0029EPSS
SaveExploits0References4
Improper access control
Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints...
5.5CVSS5.4AI score0.00365EPSS
SaveExploits0References1Affected Software1
CVE-2023-2118
Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints...
5.6AI score0.00365EPSS
SaveExploits0References1
20