Archive

22 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /22 November 2020 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 4.3

CVE-2020-15270

Improper session expiration in Parse Server

Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessions to still receive subscription objects. It is not possible to create subscription objects with in…

parse-community parse-server parse-server npm

Oct 22, 2020
Medium 6.0

CVE-2020-13327

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions s…

GitLab GitLab Runner gitlab-ci-multi-runner Web / CMS Ubuntu

Oct 22, 2020
Medium 5.4

CVE-2020-27666

Cross-site Scripting in Strapi

Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature.

strapi-plugin-content-manager npm

Oct 22, 2020