CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda

CVE-2023-6905

CVE-2023-6903

CVE-2023-6904

CVE-2023-3907

A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268.

**\[CVEID\]**

CVE-2021-45903

**\[PRODUCT\]**

SuiteCRM

**\[VERSION\]**

before 7.10.35 and before 7.12.2

**\[PROBLEM TYPE\]**

Cross Site Scripting (XSS)

**\[DESCRIPTION\]**

A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35 and before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268.

**Timeline:**

*   Reported to vendor 11.09.2021
*   Acknowledged 13.09.2021
*   Validated 13.09.2021
*   Fixed 17.12.2021

Headline

CVE-2021-45903: cves/CVE-2021-45903.md at main · ach-ing/cves

CVE: Latest News