Skip to content
OpenAdvisories

Product · openSUSE

travel-support-program

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-46163

    travel-support-program vulnerable to data exfiltration via Ransack query injection

    Travel support program is a rails app to support the travel support program of openSUSE (TSP). Sensitive user data (bank account details, password Hash) can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched…

    openSUSE travel-support-program