CVE-2022-36305

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the body function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-36303

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the handlefileupload function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-34025

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the post function at /web/api/v1/upload/UploadHandler.php...

PT-2022-23299

Name of the Vulnerable Software and Affected Versions Vesta versions 1.0.0 through 1.0.5 Description A cross-site scripting XSS issue was found in Vesta via the generate response function at the "/web/api/v1/upload/UploadHandler.php" API endpoint. This allows for potential exploitation...

PT-2022-23298

Name of the Vulnerable Software and Affected Versions Vesta versions 1.0.0 through 1.0.5 Description A cross-site scripting XSS issue was found in the handle file upload function at the "/web/api/v1/upload/UploadHandler.php" API endpoint. This allows for potential exploitation. No information is...

PT-2022-23300

Name of the Vulnerable Software and Affected Versions Vesta versions 1.0.0 through 1.0.5 Description A cross-site scripting XSS issue was found in the body function at the "/web/api/v1/upload/UploadHandler.php" API endpoint. This allows for potential exploitation. Recommendations For versions 1.0...

CVE-2022-36304: Improper Neutralization of Input During Web Page Generation

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the generateresponse function at /web/api/v1/upload/UploadHandler.php...

CVE-2022-34025: Improper Neutralization of Input During Web Page Generation

Vesta v1.0.0-5 was discovered to contain a cross-site scripting XSS vulnerability via the post function at /web/api/v1/upload/UploadHandler.php...

DEBIAN-CVE-2018-18836

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of webclientapirequestv1data in web/api/webapiv1.c...