Lucene search
+L
LinkstackLinkstack

3 matches found

CVE
CVE
•added 2024/11/29 12:00 a.m.•83 views

CVE-2024-35451

LinkStack versions 2.7.9 through 4.7.7 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the resources fidf esources ools avicon.blade.php (referred to as resources ools avicon.blade.php or resources ools avicon.blade.php in various reports) component, which can be l...

7AI score0.00316EPSS
Save
CVE
CVE
•added 2023/10/29 12:00 a.m.•81 views

CVE-2023-5840

CVE-2023-5840 affects LinkStack prior to v4.2.9, describing a weak password recovery mechanism. The vulnerability enables password-reset-token leakage via Host header manipulation (password reset link hijacking) as demonstrated in public PoC contexts. The issue is confirmed across multiple source...

8.8CVSS6.8AI score0.00674EPSS
Save
CVE
CVE
•added 2023/10/29 12:00 a.m.•74 views

CVE-2023-5838

CVE-2023-5838 describes an issue in LinkStack before version 4.2.9 where sessions are not expired after a password change. The vulnerability affects the LinkStack repository on GitHub (linkstackorg/linkstack) and is caused by insufficient session expiration, leading to potential continued use of ...

9.8CVSS4.8AI score0.00504EPSS
Save