It was discovered that roundcube, a skinnable AJAX based webmail
solution for IMAP servers, did not properly sanitize HTML
messages. This would allow an attacker to load arbitrary JavaScript
code.
It was discovered that roundcube, a skinnable AJAX based webmail
solution for IMAP servers, did not properly sanitize HTML messages.
This would allow an attacker to load arbitrary JavaScript code.
views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith(“/”) but this does not consider a protocol-relative URL (e.g., //example.com) attack.
views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
rt-5.0.5-2.fc39
Upstream security and bugfix update.
rt-5.0.5-1.fc38
Upstream security and bugfix update.
rt-5.0.5-1.fc39
Upstream security and bugfix update.
Several vulnerabilities were discovered in ruby-rack, a modular Ruby
webserver interface, which may result in denial of service and shell
escape sequence injection.
Several vulnerabilities were discovered in ruby-rack, a modular Ruby
webserver interface, which may result in denial of service and shell
escape sequence injection.
slurm-22.05.10-1.fc37
Update to slurm 22.05.10
Use mariadb-connector-c-devel not mariadb-devel
Closes CVE-2023-41914
