2 matches found
Reflected XSS from the callback handler's error query parameter
Overview Overview @auth0/nextjs-auth0 versions before and including 1.4.1 are vulnerable to reflected XSS. An attacker can execute arbitrary code by providing an XSS payload in the error query parameter which is then processed by the callback handler as an error message. Am I affected? You are...
4.3CVSS1.8AI score0.01403EPSS
SaveExploits0Affected Software1
Elastic Logstash 'CVE-2014-4326' RCE Vulnerability - Linux
Elastic Logstash is prone to a remote code execution RCE vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
7.5CVSS7.8AI score0.03297EPSS
SaveExploits0References2
20