Skip to content
OpenAdvisories

Archive

20 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /20 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-6199 Public exploit

    Book Stack v23.10.2 - LFR via Blind SSRF

    Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

    BookStack BookStack
  • Critical 9.7
    CVE-2023-48292 Public exploit EPSS 23%

    XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

    The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacke…

    xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven
  • Medium 5.9
    CVE-2023-48223 Public exploit

    fast-jwt JWT Algorithm Confusion

    fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match …

    nearform fast-jwt fast-jwt npm