Skip to content
OpenAdvisories

Archive

26 May 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.8

    Apache Knox allows impersonation of users

    For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this …

  • Medium 4.3

    Contao Core directory traversal vulnerability

    Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.

  • Medium 6.5

    An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns p…