EUVD-2023-30085

Malicious code in bioql PyPI...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

Design/Logic Flaw

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

UBIKA WAAP Gateway/Cloud Injection Vulnerability

UBIKA WAAP Gateway/Cloud is a UBIKA solution for managing application security at the enterprise level. A security vulnerability exists in UBIKA WAAP Gateway/Cloud versions 6.10 and earlier, which stems from the presence of XPath injection, and can be exploited by an attacker to cause an...

CVE-2023-26261: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2023-26261

Summary: CVE-2023-26261 affects Ubika WAAP Gateway/Cloud (up to v6.10). It describes a blind XPath injection that enables authentication bypass by stealing another user’s session. Impact: enables unauthorized session hijacking with high impact on confidentiality, integrity, and availability as pe...

PT-2023-20570 · Ubika · Ubika Waap Gateway/Cloud

Name of the Vulnerable Software and Affected Versions: UBIKA WAAP Gateway/Cloud versions prior to 6.11.0 UBIKA WAAP Gateway/Cloud versions prior to 6.5.6-patch15 Description: A blind XPath injection issue leads to an authentication bypass by stealing the session of another connected user...