Lucene search
+L

7 matches found

NVD
NVD
added 2026/08/19 10:16 p.m.15 views

CVE-2026-59992

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without...

5.4CVSS0.00279EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/19 9:30 p.m.9 views

CVE-2026-59992 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without...

5.4CVSS5.3AI score0.00279EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 9:30 p.m.41 views

CVE-2026-59992 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without...

5.4CVSS0.00279EPSS
SaveExploits0References4
Akamai Blog
Akamai Blog
added 2025/02/27 10:20 a.m.13 views

Stream Data from Linode Object Storage Using the AWS S3 SDK

Learn how to build a Spin application in TypeScript that streams data from Linode Object Storage using the AWS S3 SDK...

5.8AI score
SaveExploits0
MSRC
MSRC
added 2022/07/19 7:00 a.m.24 views

Azure Storage SDK でのクライアントサイド暗号化におけるパディング オラクル の脆弱性を軽減

本ブログは、Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability の抄訳版です。最新の情報は原文を参照してください。...

1.5AI score
SaveExploits0
MSRC
MSRC
added 2022/07/18 7:00 a.m.55 views

Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability

Summary Summary Google informed Microsoft under Coordinated Vulnerability Disclosure CVD of a padding oracle vulnerability that may affect customers using Azure Storage SDK for Python, .NET, Java client-side encryption CVE-2022-30187. To mitigate this vulnerability, we released a new General...

1.9CVSS2.7AI score0.00532EPSS
SaveExploits0
Circl
Circl
added 2022/07/13 2:25 a.m.15 views

CVE-2022-30187

creationtimestamp| type| source ---|---|--- 2022-07-13 02:25:48+00:00| seen| https://t.me/cibsecurity/46123 2022-07-18 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/07/mitigation-for-azure-storage-sdk-client-side-encryption-padding-oracle-vulnerability/...

4.7CVSS5.6AI score0.00532EPSS
SaveExploits0References2
Rows per page
Query Builder