CVE-2023-26468

Description

References

• cerebrate-project/cerebrate commit 7ccf925 · Patch

Weitere Schwachstellen in cerebrate

• CVE-2023-41908MITTEL 5.3Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
• CVE-2023-41363MITTEL 4.3In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
• CVE-2023-28883KRITISCH 9.8In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
• CVE-2022-25321MITTEL 6.1An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
• CVE-2022-25320MITTEL 5.3An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.