Skip to content
OpenAdvisories

Vendor

Chaskiq

6 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.8

    Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpoint

    Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata a…

  • Medium 6.5

    Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq

    chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')