Lucene search
+L
LinkstackLinkstack

3 matches found

CVE
CVE
added 2024/11/29 12:00 a.m.82 views

CVE-2024-35451

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

7AI score0.00316EPSS
Save
CVE
CVE
added 2023/10/29 12:00 a.m.81 views

CVE-2023-5840

CVE-2023-5840 affects LinkStack prior to v4.2.9, describing a weak password recovery mechanism. The vulnerability enables password-reset-token leakage via Host header manipulation (password reset link hijacking) as demonstrated in public PoC contexts. The issue is confirmed across multiple source...

8.8CVSS6.8AI score0.00674EPSS
Save
CVE
CVE
added 2023/10/29 12:00 a.m.74 views

CVE-2023-5838

CVE-2023-5838 describes an issue in LinkStack before version 4.2.9 where sessions are not expired after a password change. The vulnerability affects the LinkStack repository on GitHub (linkstackorg/linkstack) and is caused by insufficient session expiration, leading to potential continued use of ...

9.8CVSS4.8AI score0.00504EPSS
Save