Cross-Site Scripting in keystone

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2017-15878 · ADVISORY
• keystonejs/keystone#4478 · WEB
• GitHub Advisory GHSA-7qcx-jmrc-h2rr · ADVISORY
• keystonejs/keystone · PACKAGE
• packetstormsecurity.com/files/144756/KeystoneJS-4.0.0-beta.5-Unauthenticated-Stored-Cross-Site-Scripting.html · WEB
• securelayer7.net/download/pdf/KeystoneJS-Pentest-Report-SecureLayer7.pdf · WEB
• exploit-db.com/exploits/43054 · WEB
• npmjs.com/advisories/980 · WEB
• blog.securelayer7.net/keystonejs-open-source-penetration-testing-report · WEB
• securityfocus.com/bid/101541 · WEB
• blog.securelayer7.net/keystonejs-open-source-penetration-testing-report · Issue Tracking
• exploit-db.com/exploits/43054 · Exploit

Lỗ hổng khác của keystone

• CVE-2026-33326TRUNG BÌNH 4.3Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be bypassed in findMany…
• CVE-2025-46720TRUNG BÌNH 4.3Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can be bypassed in `updat…
• CVE-2023-40027TRUNG BÌNH 5.3Keystone is an open source headless CMS for Node.js — built with GraphQL and React. When `ui.isAccessAllowed` is set as `undefined`, the `ad…
• CVE-2023-34247TRUNG BÌNH 4.1Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, w…
• CVE-2022-39382NGHIÊM TRỌNG 9.8Keystone is a headless CMS for Node.js — built with GraphQL and React.`@keystone-6/[email protected] || 3.0.1` users that use `NODE_ENV` to trigger…