Open Source Vulnerabilities
Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem
Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem
Session is not expiring after password reset in Engelsystem
OpenSearch Issue with tenant read-only permissions
Improper escaping of user input in discourse-calendar
Unauthenticated access to new private chat messages in Discourse
Unauthenticated access to new private chat messages in Discourse
Prevent unauthorized access to summary details in Discourse
Prevent unauthorized access to summary details in Discourse
fastdds, fastdds, fastdds, fastdds, fastdds
Malicious requests can fill up the log files resulting in a deinal of service in Discourse
Malicious requests can fill up the log files resulting in a deinal of service in Discourse
Exposure of poll options and votes to unauthorized users in Discourse
Exposure of poll options and votes to unauthorized users in Discourse
Cross-site Scripting via email preview when CSP disabled in Discourse
Cross-site Scripting via email preview when CSP disabled in Discourse
Disclosure of project names to unauthorized users in MantisBT
Malformed DATA submessage leads to bad-free error in Fast-DDS
CSRF Token Validation Vulnerability in fiber
CSRF Token Reuse Vulnerability in fiber
Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App
Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App
Arbitrary keys can be added to a topic's custom fields by any user in Discourse
Arbitrary keys can be added to a topic's custom fields by any user in Discourse
