WS-2020-0090

ngx-md before 6.0.3 is vulnerable to Cross-Site Scripting. Links are not properly restricted to http/https and can contain JavaScript which may lead to arbitrary code execution...

PT-2023-30242 · Apache · Apache Allura

Name of the Vulnerable Software and Affected Versions: Apache Allura versions 1.0.1 through 1.15.0 Description: The issue allows project administrators to import attachments with unrestricted URL values, potentially causing Apache Allura to read local files and expose them. This exposure can lead...