PT-2022-26302 · Lavalite · Lavalite

Name of the Vulnerable Software and Affected Versions: Lavalite version 9.0.0 Description: The issue allows for path traversal attacks through the XSRF-TOKEN cookie, enabling read access to arbitrary files on the server. Recommendations: For Lavalite version 9.0.0, consider restricting access to...

CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

Lavalite 9.0.0 XSRF TOKEN cookie File path traversal Vulnerability

Title: Lavalite-9.0.0 XSRF-TOKEN cookie File path traversal Author: nu11secur1ty Vendor: https://lavalite.org/ Software: https://github.com/LavaLite/cms/releases/tag/v9.0.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/LavaLite Description: The XSRF-TOKEN cookie is...

Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 XSRF (JRASERVER-73073)

The version of Atlassian Jira installed on the remote host is prior to 8.13.15 / 8.14.x 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73073 advisory. - jira-importers-plugin has misconfigured XSRF protection - CVE-2021-43941 CVE-2021-43941 Note that...

Atlassian Jira 8.15.x < 8.16.0 XSRF (JRASERVER-72761)

The version of Atlassian Jira installed on the remote host is prior to 8.15.x 8.16.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72761 advisory. - Replay attack via the CSRF failure retry form - CVE-2021-39124 CVE-2021-39124 Note that Nessus has not tested for th...

Atlassian Jira < 8.13.16 / 8.14.x < 8.20.5 / 8.21.0 XSRF (JRASERVER-73170)

The version of Atlassian Jira installed on the remote host is prior to 8.13.16 / 8.14.x 8.20.5 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73170 advisory. - CSRF allows toggling Thread Contention and CPU Monitoring - CVE-2021-43953 CVE-2021-43953 Note th...

Atlassian Jira < 8.5.10 / 8.6.x < 8.13.1 XSRF (JRASERVER-71806)

The version of Atlassian Jira installed on the remote host is prior to 8.5.10 / 8.6.x 8.13.1. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-71806 advisory. - CSRF token theft through referrer headers - CVE-2021-39126 CVE-2021-39126 Note that Nessus has not tested fo...

Paymoney 3.3 Cross Site Scripting Vulnerability

Title: paymoney-3.3 XSS-Reflected Author: nu11secur1ty Vendor: https://paymoney.techvill.org/ Software: paymoney-3.3 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3 Description: The parameters firstname and lastname in Users are vulnerable...

Paymoney 3.3 Cross Site Scripting

Title: paymoney-3.3 XSS-Reflected Author: nu11secur1ty Date: 07.02.2022 Vendor: https://paymoney.techvill.org/ Software: paymoney-3.3 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/paymoney/2022/paymoney-3.3 Description: The parameters firstname and lastname in User...

GHSA-8VPW-MGPF-MPVV Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests...

Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests...

GHSA-QVQM-H22R-4CP9 Laravel Framework RCE Vulnerability

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in...

Laravel Framework RCE Vulnerability

In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in...

SAP BusinessObjects Business Intelligence Platform XSRF (3130497)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a cross site request forgery XSRF vulnerability. An XSRF token visible in the URL may lead to information disclosure. Note that Nessus has not attempted to exploit these issues bu...

Cisco SD-WAN vManage Software XSRF (cisco-sa-sdwan-vmanage-csrf-rxQL4tXR)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an...

Atlassian Jira < 8.13.18 / 8.14.x < 8.20.6 / 8.21.0 XSRF (JRASERVER-73138)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is affected by a cross-site request forgery XSRF vulnerability. Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default...

Atlassian Jira Server jira-importers-plugin跨站请求伪造漏洞

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. Atlassian Jira Server jira-importers-plugin is vulnerable to cross-site request forgery, which stems from jira-importers-plugin being misconfigured with XSRF protection. An...

Mageia: Security Advisory (MGASA-2017-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities fixed in Liferay Portal

Vulnerabilities have been fixed in Liferay Portal. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Manipulation of data Circumvention of security measure...