Landscape Security Vulnerabilities

CVE-2023-32549

Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.

CVE-2023-32550

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

CVE-2023-32551

Landscape allowed URLs which caused open redirection.