Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-1584: update · microweber/microweber@527abd1

Reflected XSS in GitHub repository microweber/microweber prior to 1.2.16. Executing JavaScript as the victim

CVE
#xss#web#git#java

@@ -616,6 +616,8 @@ public function module()

if(is_string($v)) {

$v = str_replace('<’, '-', $v);

$v = str_replace('>’, '-', $v);

$v = str_replace('"’, '-', $v);

$v = str_replace("’", '-', $v);

}

if(is_array($v)) {

$v = $xssClean->cleanArray($v);

@@ -626,6 +628,8 @@ public function module()

if(is_string($k)){

$k = str_replace('<’, '-', $k);

$k = str_replace('>’, '-', $k);

$k = str_replace('"’, '-', $k);

$k = str_replace("’", '-', $k);

$k = $xssClean->clean($k);

if($k){

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907