OpenObserve 跨站脚本漏洞

OpenObserve is a cloud-native observability platform open-sourced by OpenObserve. A cross-site scripting vulnerability exists in OpenObserve 0.16.1 and prior versions that stems from user-controlled input not properly escaping HTML when inserted into an email template, which could lead to...

CVE-2023-27483 fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime

crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the Paved type's SetValue method with user provided input without proper...

PT-2019-14705 · Jenkins · Jenkins Maven Release Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Maven Release Plugin versions 0.16.1 and earlier Description: A cross-site request forgery issue exists in the connection test form method, allowing attackers to have the system connect to a specified web server and parse XML document...