Structurizr on-premises - Cross Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194. id: CVE-2023-5556 info: name: Structurizr on-premises - Cross Site Scripting author: shankaracharya severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository...

Structurizr Panel - Detect

Structurizr login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Structurizr login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Structurizr Panel - Detect', 'description':...

Structurizr chart creation tool Unauthenticated Access Disclosure

The vulnerability of the Structurizr diagramming tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2025-54570

Уязвимость инструмента для создания диаграммных структур Structurizr связана с недостаточной проверкой запросов на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

CVE-2023-5556

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

CVE-2023-5556

CVE-2023-5556 corresponds to a reflected Cross-Site Scripting (XSS) in Structurizr on-premises prior to 3194. The vulnerability is triggered via the version parameter in workspace URLs (e.g., GET /workspace/[workspaceid]?version=...). The issue allows an attacker to inject JavaScript in authentic...

CVE-2023-5556

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

CVE-2023-5556: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

PT-2023-32174 · Structurizr · Structurizr/Onpremises

Name of the Vulnerable Software and Affected Versions: structurizr/onpremises versions prior to 3194 Description: The issue is related to Cross-site Scripting XSS - Reflected. This means that an attacker can inject malicious scripts into a website, which are then executed by the user's browser...

onpremises Cross-Site Scripting Vulnerability

onpremises is an open source application from Structurizr. A cross-site scripting vulnerability exists in versions prior to onpremises 3194. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

RXSS in onpremises version of structurizr

Description During investigation it was found that onpremises api endpoint GET parameter version is vulnerable to XSS injection: /workspace/workspaceid?version=1; Proof of Concept 1. Visit the link provided: http:///workspace/1/?version=1%22;alert1; 2. XSS injected...

com.gitee.tanxianbo:mybatiscreatetable (1.0), com.pugwoo:spring-mvc-conf (0.0.6) +40 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (4.2.9.release)

org.springframework:spring-webmvc MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gitee.tanxianbo:mybatiscreatetable 1.0 - com.pugwoo:spring-mvc-conf 0.0.6 -...