Skip to content
OpenAdvisories

Archive

19 March 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-5233 Scanner template

    Grav CMS Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

  • Medium 5.9

    Moderate severity vulnerability that affects org.springframework.boot:spring-boot

    Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which a…