Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-0955: follow up to https://github.com/pimcore/data-hub/pull/462 · pimcore/data-hub@15d5b57

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.

CVE
#xss#git

Permalink

Browse files

follow up to #462

  • Loading branch information

@dvesh3

1 parent 1561fa5 commit 15d5b57af2466eebd3bbc531ead5dafa35d0a36e

Showing with 1 addition and 1 deletion.

  1. +1 −1 src/Controller/ConfigController.php

@@ -50,7 +50,7 @@ private function buildItem($configuration): array

return [

‘id’ => $name,

‘text’ => $name,

‘text’ => htmlspecialchars($name),

‘type’ => 'config’,

‘iconCls’ => ‘plugin_pimcore_datahub_icon_’ . $type,

‘expandable’ => false,

0 comments on commit 15d5b57

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907