Skip to content
OpenAdvisories

Archive

16 May 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.5

    SourceCodester Guest Management System GET Parameter dateTest.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown functionality of the file dateTest.php of the component GET Parameter Handler. The manipulation of the a…

  • Low 3.7

    Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation

    Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercep…