Skip to content
OpenAdvisories

Archive

20 April 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-1767 Public exploit

    The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature …

  • Medium 4.3
    CVE-2023-28458 Public exploit

    pretalx allows path traversal in HTML export

    pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

  • Medium 6.5
    CVE-2023-28459 Public exploit

    pretalx vulnerable to path traversal in HTML export

    pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.