502 matches found
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
GHSA-RPJR-PCMR-9PPW Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
EUVD-2025-33723
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
Statamic Alt Redirect security vulnerabilities
Statamic Alt Redirect is an open source redirection plugin from Alt Design. A security vulnerability exists in Statamic Alt Redirect version 1.6.3, which stems from incomplete query string parameter cleanup and could lead to cache poisoning, parameter contamination, or denial of service attacks...
CVE-2025-60868: Authentication Bypass by Spoofing
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic fails to consistently strip query string parameters when the "Query String Strip" feature is enabled. Case variations, encoded keys, and duplicates are not removed, allowing attackers to bypass sanitization. This may lead to cache poisoning, parameter...
CVE-2025-60868
The Alt Redirect 1.6.3 addon for Statamic contains a security vulnerability where the "Query String Strip" feature fails to consistently remove query string parameters. Specifically, the logic fails to handle case variations , encoded keys , and duplicate parameters , allowing attackers to bypass...
EUVD-2018-11287
Malware in sbrugna...
EUVD-2023-2924
Malicious code in bioql PyPI...
EUVD-2023-1981
Malicious code in bioql PyPI...
EUVD-2024-0740
Malicious code in bioql PyPI...
EUVD-2023-2850
Malicious code in bioql PyPI...
EUVD-2022-2617
Malicious code in bioql PyPI...
EUVD-2024-2152
Malicious code in bioql PyPI...
EUVD-2022-1517
Malicious code in bioql PyPI...
CVE-2020-9322
The /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user. This can be exploited via CSRF. Stored XSS can occur via a JavaScript payload in a username during account registration. Reflected XSS can occur via the /users PATHINFO...
Statamic Core security vulnerabilities
Statamic Core is a core component of a content management system from US-based Statamic. A security vulnerability exists in versions of Statamic Core prior to 2.11.8 that stems from the /users endpoint not properly validating input, which could lead to a cross-site scripting attack...