Open Source CVEs

Keeping you up to date with CVEs found in open source software.

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2730): Cross-site Scripting (XSS) - Stored in pimcore/pimcore.

https://t.co/K7rIljvqGv

Disclosed by https://t.co/iHKBQ4Wuj3, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2675): Improper Restriction of Excessive Authentication Attempts in linagora/twake.

https://t.co/Bq5s1TH9e0

Disclosed by https://t.co/x4vjpN4yqz, fixed by @Linagora...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2674): Improper Access Control in openemr/openemr.

https://t.co/vWqcbUQJAQ

Disclosed by @__nhienit__, fixed by openemr maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2666): Allocation of Resources Without Limits or Throttling in froxlor/froxlor.

https://t.co/Mb9KS4Vhau

Disclosed by https://t.co/MrVEhSsIwe, fixed by froxlor maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2665): Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis.

https://t.co/TjHNTpBgXW

Disclosed by https://t.co/y5xUPtOymo, fixed by francoisjacquet maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2630): Cross-site Scripting (XSS) - Stored in pimcore/pimcore.

https://t.co/olqKUVZepG

Disclosed by @70rpedo, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2629): Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework.

https://t.co/aHMusl9yBV

Disclosed by @sampritdas8, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2616): Cross-site Scripting (XSS) - Generic in pimcore/pimcore.

https://t.co/2zqXsyafx9

Disclosed by @sampritdas8, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2615): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore.

https://t.co/pUFK7QetNb

Disclosed by @sampritdas8, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2614): Cross-site Scripting (XSS) - DOM in pimcore/pimcore.

https://t.co/nD8O4CK9Ej

Disclosed by @sampritdas8, fixed by pimcore maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2610): Integer Overflow or Wraparound in vim/vim.

https://t.co/GG8zB6QIIe

Disclosed by https://t.co/IZU0V2L8Wr, fixed by vim maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2609): NULL Pointer Dereference in vim/vim.

https://t.co/YlavTEGNbQ

Disclosed by https://t.co/IZU0V2L8Wr, fixed by vim maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2591): Code Injection in nilsteampassnet/teampass.

https://t.co/QHs7EnQlpW

Disclosed by @MnQAZI, fixed by @TheTeamPass...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2590): Missing Authorization in answerdev/answer.

https://t.co/HXTFQX0Tew

Disclosed by https://t.co/fEWmzEYRJ8, fixed by @answerdev...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2583): Code Injection in jsreport/jsreport.

https://t.co/1bjM5vnZms

Disclosed by https://t.co/ZyBmcX8cTI, fixed by jsreport maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2566): Cross-site Scripting (XSS) - Stored in openemr/openemr.

https://t.co/WYSMtH7uBY

Disclosed by https://t.co/bYpI4eoNDU, fixed by openemr maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2564): OS Command Injection in sbs20/scanservjs.

https://t.co/R77Ldw8SGJ

Disclosed by https://t.co/I14WJHkTGO, fixed by sbs20 maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2554): External Control of File Name or Path in unilogies/bumsys.

https://t.co/w95MeTioGo

Disclosed by https://t.co/518PJCiRo5, fixed by unilogies maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2553): Cross-site Scripting (XSS) - Stored in unilogies/bumsys.

https://t.co/0uOcmhIDIH

Disclosed by https://t.co/iOK8URSlj7, fixed by unilogies maintainers...

#opensource #CVE #bugbounty #security #vulnerability

[Open Source CVEs @OpenSourceHacks]

(CVE-2023-2552): Cross-Site Request Forgery (CSRF) in unilogies/bumsys.

https://t.co/UK1qGiCZzE

Disclosed by https://t.co/TIud8rhdL2, fixed by unilogies maintainers...

#opensource #CVE #bugbounty #security #vulnerability