13 matches found
wp2shell-lab
mini-wp-rest A compact, dependency-free reimplementation of a small slice of WordPress's REST API — just enough to serve a public posts collection and run several sub-requests in one round trip. Handy for teaching how WordPress routing, WPQuery, and $wpdb fit together without pulling in all of...
CVE-2026-19622
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests...
PT-2026-111092
Name of the Vulnerable Software and Affected Versions IBM Planning Analytics versions 2.0 through 2.1 Description Improper validation of sub-requests allows a remote attacker to bypass authentication and escalate privileges. Recommendations At the moment, there is no information about a newer...
Anubis input validation error vulnerability
Anubis is a tool for Xe Iaso Individual Developers. An input validation error vulnerability exists in Anubis versions prior to 1.23.0, which stems from sub-request authentication not validating the redirection URL, which could result in a redirection to an arbitrary URL scheme...
Webcache Poisoning in shopware/platform and shopware/core
Impact Webcache Poisoning via X-Forwarded-Prefix and sub-request Patches We recommend updating to the current version 6.4.6.1. You can get the update to 6.4.6.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For...
GHSA-R64M-QCHJ-HRJP Webcache Poisoning in shopware/platform and shopware/core
Impact Webcache Poisoning via X-Forwarded-Prefix and sub-request Patches We recommend updating to the current version 6.4.6.1. You can get the update to 6.4.6.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For...
PT-2021-24456
Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.4.6.1 Description: The issue is related to Webcache Poisoning via X-Forwarded-Prefix and sub-request. Recommendations: For versions prior to 6.4.6.1, update to version 6.4.6.1. For older versions of 6.1, 6.2, and...
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
Description When a Symfony application is running behind a proxy or a load-balancer, you can tell Symfony to look for the X-Forwarded- HTTP headers. HTTP headers that are not part of the "trustedheaders" allowed list are ignored and protect you from "Cache poisoning" attacks. In Symfony 5.2, we'v...
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
More info at https://symfony.com/cve-2021-41267...
CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request
More info at https://symfony.com/cve-2021-41267...
Apache 2.2.x < 2.2.15 Multiple Vulnerabilities
According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.15. It is, therefore, potentially affected by multiple vulnerabilities : - A TLS renegotiation prefix injection attack is possible. CVE-2009-3555 - The 'modproxyajp' module returns the wrong status cod...
Apache < 2.2.15 Multiple Vulnerabilities
According to its banner, the version of Apache 2.2 installed on the remote host is older than 2.2.15. Such versions are potentially affected by multiple vulnerabilities : - A TLS renegotiation prefix attack is possible. CVE-2009-3555 - The 'modproxyajp' module returns the wrong status code if it...