Skip to content
OpenAdvisories

Archive

3 February 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2022-24894 Public exploit

    Symfony storing cookie headers in HttpCache

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses (including headers) and returns them to the clients. In a recent change in the…

  • Medium 4.8
    CVE-2022-47131 Public exploit

    A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

  • Medium 4.3
    CVE-2022-47130 Public exploit

    A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if a…