Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/02/02 7:49 p.m.22 views

CVE-2026-24051 OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking

OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking Untrusted Search Paths on macOS/Darwin systems. The resource detection code in sdk/resource/hostid.go executes the ioreg system command using a search pat...

7CVSS0.00017EPSS
Exploits0References2
Mageia
Mageia
added 2024/04/30 10:25 p.m.90 views

Updated mediawiki packages fix security vulnerabilities

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

9CVSS6.4AI score0.11025EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2023/09/26 5:25 p.m.29 views

CVE-2023-3550

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

7.3CVSS7AI score0.00185EPSS
Exploits1References3
OSV
OSV
added 2023/09/25 4:15 p.m.26 views

CVE-2023-3550

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

7.3CVSS7.2AI score
Exploits0References5
Cvelist
Cvelist
added 2023/09/25 3:20 p.m.17 views

CVE-2023-3550 Stored XSS leads to privilege escalation in MediaWiki v1.40.0

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

7.3CVSS7.2AI score0.00185EPSS
Exploits1References5
CVE
CVE
added 2023/09/25 3:20 p.m.94 views

CVE-2023-3550

CVE-2023-3550 affects MediaWiki 1.40.0, where XML upload handling does not validate namespaces. This enables a low-privilege user to craft a malicious XML and, by enticing an administrator to open it, escalate privileges to administrator on the target wiki. Remediation in connected advisories poi...

9CVSS7.2AI score0.00185EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder