Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-32872 | Umbraco Workflow.Issues prior 10.3.9/12.2.6/13.0.6 API Endpoint sql injection (GHSA-287f-46j7-j4wh)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as critical, was found in Umbraco Workflow.Issues. This affects an unknown part of the component API Endpoint. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-32872. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🔧 Reusing Umbraco Properties in Umbraco v14


📈 37.83 Punkte
🔧 Programmierung

🕵️ CVE-2023-28442 | GeoNode prior 2.18.7/2.19.6/2.20.6 Geoserver REST API Endpoint status information disclosure (GHSA-87mh-vw7c-5v6w)


📈 31.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-41899 | Home Assistant prior 2023.9.0 REST API Endpoint hassio.addon_stdin server-side request forgery (GHSA-4r74-h49q-rr3h)


📈 31.33 Punkte
🕵️ Sicherheitslücken

🕵️ JetBrains YouTrack prior 2020.3.7955 Workflow Rule behavioral workflow


📈 30.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-38694 | Umbraco CMS up to 8.18.9/10.6.x/12.0.x cross site scripting (GHSA-xxc6-35r7-796w)


📈 29.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48313 | Umbraco CMS up to 10.8.0/12.3.3 cross site scripting (GHSA-v98m-398x-269r)


📈 29.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49279 | Umbraco CMS up to 7.15.10/8.18.8/10.6.x/11.4.x/12.1.x SVG File cross site scripting (GHSA-6xmx-85x3-4cv2)


📈 29.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49274 | Umbraco CMS up to 8.18.9 Reset Password information disclosure (GHSA-8qp8-9rpw-j46c)


📈 29.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49089 | Umbraco CMS up to 8.18.9/10.8.0/12.2.x path traversal (GHSA-6324-52pr-h4p5)


📈 29.33 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-24812 | Misskey up to 13.3.2 Note Search API api/notes/search-by-tag sql injection (GHSA-cgwp-vmr4-wx4q)


📈 29.27 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-23510 | cube-js prior 0.31.24 /v1/sql-runner sql injection (GHSA-6jqm-3c9g-pch7)


📈 28.04 Punkte
🕵️ Sicherheitslücken

🕵️ 42Gears SureMDM prior 2018-11-27 API Endpoint /api/register/:email GET Request information disclosure


📈 26.7 Punkte
🕵️ Sicherheitslücken

🕵️ Umbraco 7.3.8 GetInpectSearch nodeName sql injection


📈 26.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39217 | some-natalie ghas-to-csv prior v1 API injection (GHSA-634p-93h9-92vh)


📈 26.09 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-26482 | Nextcloud Server up to 24.0.9/25.0.3 Workflow os command injection (GHSA-h3c9-cmh8-7qpj)


📈 25.65 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-36783 | SUSE Rancher up to 2.5.12/2.6.3 API Endpoint information disclosure (GHSA-8w87-58w6-hfv8)


📈 24.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28645 | Nextcloud Richdocuments up to 6.3.1/7.0.1 Internal API Endpoint access control (GHSA-95j6-p5cj-5hh5)


📈 24.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-3990 | Harbor API Endpoint /users information disclosure (GHSA-6qj9-33j4-rvhg)


📈 24.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36485 | ILIAS up to 7.22/8.2 workflow-engine behavioral workflow


📈 24.7 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36486 | ILIAS up to 7.22/8.2 workflow-engine behavioral workflow


📈 24.7 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-2753 | Oracle Workflow up to 12.2.9 Workflow Notification Mailer unknown vulnerability


📈 24.7 Punkte
🕵️ Sicherheitslücken

🔧 The Challenge of Versioning Expandable API's in Umbraco


📈 24.69 Punkte
🔧 Programmierung

🔧 Create an API in Umbraco in 5 Minutes: A Quick Guide for Developers


📈 24.69 Punkte
🔧 Programmierung

🕵️ CVE-2022-31058 | Enalean Tuleap prior 13.9.99.95 Tracker Report sql injection (GHSA-4v2p-rwq9-3vjf)


📈 24.17 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-22630 | IzyBat Orange Casiers prior 20221102_1 getCasier.php taille sql injection (GHSA-j94f-5cg6-6j9j)


📈 24.17 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-43794 | nocodb prior 0.111.0 SqliteClient.ts sql injection (GHSA-3m5q-q39v-xf8f)


📈 24.17 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50429 | IzyBat Orange Casiers prior 20230803_1 getEnsemble.php sql injection (GHSA-mc3w-rv8p-f9xf)


📈 24.17 Punkte
🕵️ Sicherheitslücken

🕵️ Sophos Central Endpoint/Home Endpoint prior 9.9.6 on Mac privileges management


📈 23.84 Punkte
🕵️ Sicherheitslücken

📰 Git Workflow for Machine Learning Projects: the Git Workflow I use in my Projects


📈 23.58 Punkte
🔧 AI Nachrichten

🔧 What is Workflow Automation? The Essence and Evolution of Workflow Automation


📈 23.58 Punkte
🔧 Programmierung

🔧 Understanding Workflow Schemes and Instances in Optimajet Workflow Engine


📈 23.58 Punkte
🔧 Programmierung

🕵️ CVE-2022-35864 | BMC Track-It! prior 20.21.02.109 Endpoint GetPopupSubQueryDetails sql injection (ZDI-CAN-16690)


📈 23.58 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-35947 | GLPI up to 10.0.2 API sql injection (GHSA-7p3q-cffg-c8xh)


📈 23.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39323 | GLPI up to 10.0.3 API REST user_token sql injection (GHSA-cp6q-9p4x-8hr9)


📈 23.49 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco TelePresence Collaboration Endpoint Video Endpoint API exposure of resource


📈 23.16 Punkte
🕵️ Sicherheitslücken

matomo
•