Skip to content
OpenAdvisories

Archive

21 June 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3

    Unrestricted Uploads in Concrete5

    Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

  • Medium 5.3

    Insecure Permissions in Gogs

    In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.