PT-2024-13808 · Webflow · Webflow Pages

Name of the Vulnerable Software and Affected Versions: Webflow Pages versions 1.0.0 through 1.0.8 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.0.0 through...

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

Cybersecurity researchers have warned of a spike in phishing pages created using a website builder tool called Webflow, as threat actors continue to abuse legitimate services like Cloudflare and Microsoft Sway to their advantage. "The campaigns target sensitive information from different crypto...

org.apereo.cas:cas-server-support-rest-x509 (>=6.5.0, <=6.6.5), org.apereo.cas:cas-server-support-x509 (>=6.5.0, <=6.6.5) +1 more potentially affected by CVE-2023-28857 via org.apereo.cas:cas-server-support-x509-core (>=6.5.0, <=6.6.5)

org.apereo.cas:cas-server-support-x509-core MAVEN version =6.5.0, =6.5.0, =6.5.0, =6.5.0, =6.6.5 Source cves: CVE-2023-28857 Source advisory: OSV:GHSA-P78H-M8PV-G9GM...

org.apereo.cas:cas-server-support-rest-x509 (>=6.5.0, <=6.6.5), org.apereo.cas:cas-server-support-x509 (>=6.5.0, <=6.6.5) +1 more potentially affected by CVE-2023-28857 via org.apereo.cas:cas-server-support-x509-core (>=6.5.0, <=6.6.5)

org.apereo.cas:cas-server-support-x509-core MAVEN version =6.5.0, =6.5.0, =6.5.0, =6.5.0, =6.6.5 Source cves: CVE-2023-28857 Source advisory: GHSA-P78H-M8PV-G9GM...

CVE-2024-34689

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of th...

CVE-2024-34689

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of th...

CVE-2024-34689 [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of th...

CVE-2024-34689: Server-Side Request Forgery (SSRF)

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of th...

RHEL 7 : spring-webflow (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - spring-webflow: Data Binding Expression Vulnerability in Spring Web Flow CVE-2017-8039 - An issue was...

com.evasion:client (>=1.0.0.1, <=1.0.0.3), org.grails:grails-webflow (>=2.2.0.rc1, <=2.2.5) +12 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.5.6.sec01)

org.springframework:spring-web MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.evasion:client =1.0.0.1, =2.2.0.rc1, =2.0.2, =1.0.0.release, =2.0.8.release,...

Webflow Pages <= 1.0.8 - Missing Authorization

Description The Webflow Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 1.0.8. This makes it possible for unauthenticated attackers to perform an unauthorized action...

WordPress Webflow Pages Plugin <= 1.0.8 is vulnerable to Broken Access Control

Software Webflow Pages Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.1.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49818 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f0a2c4f0050b Credits Mika Required privilege...

org.apereo.cas:cas-server-support-rest-x509 (>=6.5.0, <=6.6.5), org.apereo.cas:cas-server-support-x509 (>=6.5.0, <=6.6.5) +1 more potentially affected by CVE-2023-28857 via org.apereo.cas:cas-server-support-x509-core (>=6.5.0, <=6.6.5)

org.apereo.cas:cas-server-support-x509-core MAVEN version =6.5.0, =6.5.0, =6.5.0, =6.5.0, =6.6.5 Source cves: CVE-2023-28857 Source advisory: MEND:CVE-2023-28857...

org.grails:grails-crud (1.1-beta1), org.grails:grails-gorm (1.1-beta1) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.1-beta1)

org.grails:grails-core MAVEN version 1.1-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-beta1 - org.grails:grails-gorm 1.1-beta1 - org.grails:grails-scripts 1.1-beta1 -...

org.grails:grails-crud (1.2-m4), org.grails:grails-docs (1.2-m4) +4 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2-m4)

org.grails:grails-core MAVEN version 1.2-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2-m4 - org.grails:grails-docs 1.2-m4 - org.grails:grails-gorm 1.2-m4 -...

org.grails:grails-crud (1.2.0.rc2), org.grails:grails-gorm (1.2.0.rc2) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.0.rc2)

org.grails:grails-core MAVEN version 1.2.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.0.rc2 - org.grails:grails-gorm 1.2.0.rc2 - org.grails:grails-scripts 1.2.0.rc2 -...

org.codehaus.geb:geb-grails (>=0.4, <=0.5.1), org.grails:grails-crud (1.2.3) +5 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.3)

org.grails:grails-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.codehaus.geb:geb-grails =0.4, =0.5.1 - org.grails:grails-crud 1.2.3 - org.grails:grails-gorm 1.2.3 -...

org.grails:grails-crud (1.1-rc1), org.grails:grails-gorm (1.1-rc1) +4 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.1-rc1)

org.grails:grails-core MAVEN version 1.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-rc1 - org.grails:grails-gorm 1.1-rc1 - org.grails:grails-maven-plugin 1.0-rc1 -...

org.grails:grails-crud (1.2.0), org.grails:grails-gorm (1.2.0) +4 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.0)

org.grails:grails-core MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.0 - org.grails:grails-gorm 1.2.0 - org.grails:grails-maven-plugin 1.2.0 -...

org.grails:grails-crud (1.2.5), org.grails:grails-gorm (1.2.5) +3 more potentially affected by CVE-2019-12728 via org.grails:grails-core (1.2.5)

org.grails:grails-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.5 - org.grails:grails-gorm 1.2.5 - org.grails:grails-scripts 1.2.5 - org.grails:grails-w...