3 matches found
PT-2022-24956 · Alibaba · Aliyun-Oss-Client
Name of the Vulnerable Software and Affected Versions: aliyun-oss-client versions prior to 0.8.1 Description: The aliyun-oss-client unintentionally divulges the authentication secret. Users of this library will be affected, as the incoming secret will be disclosed unintentionally. Recommendations...
PT-2019-14542 · Gophish · Gophish
Name of the Vulnerable Software and Affected Versions: Gophish versions prior to 0.8.1 Description: The issue allows for XSS via a username. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PT-2017-14611 · Mistune · Mistune
Name of the Vulnerable Software and Affected Versions: Mistune versions prior to 0.8.1 Description: The issue concerns a Cross-Site Scripting XSS vulnerability in the keyify function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML by exploiting the failure to...