Skip to content
OpenAdvisories

Package · Packagist

idno/known

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-32115

    Known vulnerable to code execution via SVG file in v1.3.1

    An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.

    idno/known Packagist
  • Medium 5.4
    CVE-2022-31290

    Known v1.3.1 Cross-site Scripting

    A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field.

    idno/known Packagist
  • Medium 4.3
    CVE-2022-30852

    Known v1.3.1 contains Insecure Direct Object Reference

    Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).

    idno/known Packagist