Skip to content
OpenAdvisories

Package · npm

total4

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2019-15952

    Total.js CMS Path Traversal

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the d…

    total4 npm
  • High 8.8
    CVE-2019-15953

    Total.js CMS Unauthorized Access

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not f…

    total4 npm