Vulnerabilities
Last updated 17 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test | Medium Risk 6.0 | 2 hours ago | 2 hours ago |
|
|
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document | Medium Risk 5.4 | 2 hours ago | 2 hours ago |
|
|
ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
|
ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction | Critical 9.9 | 7 months ago | 7 months ago |
Page 1