Autore: Angelo Barbosa

CVE-2023-49095 | nexryai nexkey prior 12.122.2 ActivityPub Request input validation

A vulnerability, which was classified as problematic, was found in nexryai nexkey. Affected is an unknown function of the component ActivityPub Request Handler. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2023-49095. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2023-44381 | October CMS prior 3.4.15 Template injection

A vulnerability, which was classified as problematic, has been found in October CMS. This issue affects some unknown processing of the component Template Handler. The manipulation leads to injection. The identification of this vulnerability is CVE-2023-44381. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2022-2232 | Keycloak prior 23.0.1 Login UsernameForm ldap injection

A vulnerability classified as problematic has been found in Keycloak. This affects an unknown part of the component Login. The manipulation of the argument UsernameForm leads to ldap injection. This vulnerability is uniquely identified as CVE-2022-2232. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più