Skip to content
OpenAdvisories

Vendor

Beghelli

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.2

    Beghelli Sicuro24 SicuroWeb Missing Content Security Policy

    Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins. When chained with the template injection and sandbox escape vulnerabilities present in the…

  • Medium 5.2

    Beghelli Sicuro24 SicuroWeb AngularJS Template Injection

    Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper rendering of untrusted input in AngularJS template contexts. Attackers can inject malicious expressi…