122 matches found
CVE-2023-46744
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
CVE-2023-46744
CVE-2023-46744 concerns a stored XSS in Squidex via SVG asset uploads. The vulnerability arises because the SVG filtering logic (which blocks [removed] and on* attributes) can be bypassed by using elements like with a javascript: URL, allowing an authenticated attacker (with assets.create permis...
CVE-2023-46744 Stored Cross-site Scripting in Squidex
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
CVE-2023-46744 Stored Cross-site Scripting in Squidex
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
CVE-2023-46744 Stored Cross-site Scripting in Squidex
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
PT-2023-29933 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex versions affected versions not specified Description: The issue concerns an arbitrary file write vulnerability in the backup restore feature of Squidex, allowing an authenticated attacker with the squidex.admin.restore permission to...
squidex path traversal vulnerability
squidex is a Headless CMS and Content Management Center. A path traversal vulnerability exists in squidex version 7.8.2, which stems from an arbitrary file write vulnerability in the backup restore feature...
PT-2023-30179 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex affected versions not specified Description: A stored Cross-Site Scripting XSS vulnerability in Squidex enables privilege escalation of authenticated users. The vulnerability is due to an insufficient SVG element filtering mechanism,...
Squidex Cross-Site Scripting Vulnerability
Squidex is a Headless CMS and Content Management Center. A cross-site scripting vulnerability exists in Squidex 7.8.2 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability...
Squidex Cross-Site Scripting Vulnerability
squidex is a Headless CMS and Content Management Center. A cross-site scripting vulnerability exists in Squidex version 7.8.2, which stems from a lack of raw validation in the postMessage handler, leading to a cross-site scripting XSS vulnerability...
CVE-2023-3580
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
Input validation
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580
The CVE-2023-3580 entry concerns the Squidex project (squidex/squidex) prior to version 7.4.0. The underlying issue is described as improper handling of an additional special element in the repository, leading to a MEDIUM impact vulnerability (per NVD/SECURITY METRICS). Affected component is the ...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
squidex 安全漏洞
squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0 that stems from improper handling of additional special elements...
PT-2023-25321 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to the improper handling of an additional special element in the GitHub repository squidex/squidex. Recommendations: For versions prior to 7.4.0, update to version 7.4.0 or lat...
Cross-site Scripting (XSS)
Overview Squidex.ClientLibrary is a ClientLibrary for Squidex Headless CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the "/squid.svg" endpoint Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious...