Author: Angelo Barbosa

CVE-2023-48711 | cjvnjde google-translate-api-browser up to 4.1.2 Web API server-side request forgery (GHSA-4233-7q5q-m7p6)

A vulnerability, which was classified as problematic, has been found in cjvnjde google-translate-api-browser up to 4.1.2. Affected by this issue is some unknown functionality of the component Web API. The manipulation leads to server-side request forgery. This vulnerability is handled as CVE-2023-48711. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-48707 | CodeIgniter4 Shield up to 1.0.0-beta.7 HMAC SHA256 cleartext storage

A vulnerability classified as problematic was found in CodeIgniter4 Shield up to 1.0.0-beta.7. Affected by this vulnerability is an unknown functionality of the component HMAC SHA256 Handler. The manipulation leads to cleartext storage of sensitive information. This vulnerability is known as CVE-2023-48707. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-48708 | CodeIgniter4 Shield up to 1.0.0-beta.7 Login log file

A vulnerability classified as problematic has been found in CodeIgniter4 Shield up to 1.0.0-beta.7. Affected is an unknown function of the component Login. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2023-48708. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-48712 | warp-tech warpgate up to 0.8.x authorization (GHSA-c94j-vqr5-3mxr)

A vulnerability was found in warp-tech warpgate up to 0.8.x. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to incorrect authorization. This vulnerability was named CVE-2023-48712. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected...

Read More