Skip to content
OpenAdvisories

Archive

10 June 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2019-11881 Public exploit

    Rancher Login Parameter Can Be Edited

    A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malici…

  • Medium 6.1

    Twisted CRLF Injection

    In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.