Skip to content
OpenAdvisories

Archive

8 August 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3

    Improper Authorization in aedes

    Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.

  • Medium 6.1

    Open Redirect

    Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes…