TI-2018-06658 CVE-2018-9160 · GHSA-jrcv-3c5h-rh3q
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Priority HIGH 81
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
No Sickrage vulnerabilities are listed in CISA KEV.
3 records
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature.
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server.