CVE-2021-23447

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

Type confusion

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

CVE-2021-23447

The CVE-2021-23447 entry concerns the Teddy templating language prior to version 0.5.9. A type-confusion vulnerability allows bypassing input sanitization when the model content is an array (not a string), potentially enabling XSS-like behavior in affected renders. The mitigation is to upgrade Te...

CVE-2021-23447 Cross-site Scripting (XSS)

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

CVE-2021-23447

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

CVE-2021-23447

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

PT-2021-15531

Name of the Vulnerable Software and Affected Versions teddy versions prior to 0.5.9 Description A type confusion issue can be exploited to bypass input sanitization when the model content is an array instead of a string. This is related to the teddy package, which is a readable and easy to learn...

CVE-2021-23447: Access of Resource Using Incompatible Type

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

Teddy 跨站脚本漏洞

Teddy is an easy-to-read, easy-to-learn template language. A security vulnerability exists in teddy that stems from the lack of effective permission and access control measures on a networked system or product...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: SNYK:JS-TEDDY-1579557...

Cross-site Scripting (XSS)

Overview teddy is a The most readable and easy to learn templating language there is! Affected versions of this package are vulnerable to Cross-site Scripting XSS. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string. PoC...

teddy-auto.com XSS vulnerability

Open Bug Bounty ID: OBB-573604 Description| Value ---|--- Affected Website:| teddy-auto.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Mr Bean™ - Flying Teddy - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr Bean™ - Flying Teddy published at the 'play' market has multiple vulnerabilities...

Radio TEDDY - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Radio TEDDY published at the 'play' market has multiple vulnerabilities...

Teddy Love Theme - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Teddy Love Theme published at the 'play' market has multiple vulnerabilities...

A Backdoor in Socat? Going Dark, IoT, and Previewing SAS 2016

Mike Mimoso and Chris Brook discuss the news of the week, including internet-connected teddy bears, the latest on the Going Dark debate, and whether or not there’s a backdoor in Socat. They also preview next week’s Security Analyst Summit in Tenerife, Spain. Download:...