Lucene search
K

5 matches found

OSV
OSV
added 2023/01/05 9:30 a.m.16 views

GHSA-VQ8W-X8V7-F88M LdapCherry Cross-site Scripting vulnerbaility

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS5.9AI score0.00289EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2023/01/05 9:30 a.m.25 views

LdapCherry Cross-site Scripting vulnerbaility

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS2.4AI score0.00289EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2023/01/05 8:15 a.m.6 views

CVE-2019-25095

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS4.4AI score0.00289EPSS
Exploits0References5
Prion
Prion
added 2023/01/05 8:15 a.m.11 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

5.8CVSS6AI score0.00289EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2023/01/05 7:44 a.m.60 views

CVE-2019-25095

CVE-2019-25095 affects kakwa LdapCherry prior to 1.0.0. The vulnerability is a Cross-Site Scripting flaw stemming from an unknown function in the component URL Handler, enabling remote attack. Upgrading to version 1.0.0 addresses the issue (patch SHA 6f98076281e9452fdb1adcd1bcbb70a6f968ade9). Ven...

6.1CVSS4.7AI score0.00289EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder