Skip to content
OpenAdvisories

Archive

February 2024

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Low 2.9
    CVE-2024-22371 Public exploit

    Apache Camel issue on ExchangeCreatedEvent

    Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, …

  • Low 2.0
    CVE-2024-1247 Public exploit

    Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field

    Concrete CMS version 9 before 9.2.5 is vulnerable to  stored XSS via the Role Name field since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Role Name field which mig…

  • Low 2.4
    CVE-2024-1269 Public exploit

    SourceCodester Product Management System supplier.php cross site scripting

    A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross sit…