Archive
8 June 2023
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Medium 4.3CVE-2023-29401 Public exploit
Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. F…
-
Medium 6.5
Thruk has Path Traversal Vulnerability in panorama.pm
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `panorama.pm` is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a fi…
-
Medium 6.5CVE-2023-32750 Public exploit
Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which…
-
Medium 5.4CVE-2023-32751 Public exploit
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are gener…