Skip to content
OpenAdvisories

Package · Ubuntu

movim

2 known vulnerabilities.

2 results · Feed

  • Low 3.1

    Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read

    Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or…

  • High 8.0

    Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a mis…