Authorization bypass in Indico
A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals.
No indico vulnerabilities are listed in CISA KEV.
29 records
A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals.
Rucio is a scientific data management framework.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user)…
Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.
ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution
A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint (`GET /dids/<scope>/dids/searc…
### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an open source a general-purpose, web based event management tool.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.