Skip to content
OpenAdvisories

Archive

15 March 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.3

    Directory Traversal

    All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID…

  • Low 3.7
    CVE-2021-28378 Public exploit

    Cross-site Scripting in Gitea

    Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.