Craft CMS: Arbitrary user password reset leading to administrator account takeover
The vulnerability allows any authenticated user to change their own password without providing the current password or h
#advisory
共收录 23530 条相关情报。
← 返回所有主题Craft CMS: Authenticated RCE through Twig sandbox escape
The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading t
OpenReception's logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry
CVE-2026-48079
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
CVE-2026-61632
PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.2
Craft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets
CVE-2026-14793
The `reorder-sets` action in Craft CMS’s `GlobalsController` is missing the `requireAdmin()` check that the adjacent `sa
OpenReception: GET appointment by ID returns full appointment record without authorization
CVE-2026-48077
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass
Craft CMS has an authenticated remote code execution issue in the control panel element-search condition handling. Craf
OpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channels
CVE-2026-48076
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. The new-clie
league/commonmark: Denial of service via deeply nested XML output
### Impact `XmlRenderer` pretty-prints XML by emitting depth-proportional indentation whitespace for **every** opening
league/commonmark: Denial of service via colliding heading slugs
### Impact `UniqueSlugNormalizer::normalize()` makes each slug document-unique by searching for an unused numeric suffi
league/commonmark: Denial of service via duplicate footnote definitions
### Impact The Footnote extension records one backref per footnote *reference* and then appends the **entire** backref
league/commonmark: Denial of service via adjacent inline attribute blocks
### Impact With the Attributes extension enabled, `AttributesListener::findTargetAndDirection()` resolves each attribut
OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections
CVE-2026-48075
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
CVE-2026-71488
### Impact Affected versions of `league/commonmark` can have quadratic time complexity when parsing specially crafted M
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
CVE-2026-71488
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially craf
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
CVE-2026-71478
## Summary The `AttributesExtension`'s `href`/`src` unsafe-link filter (`AttributesHelper::filterAttributes()`) can be
league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
CVE-2026-71478
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the Attributes
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
# Quadratic CPU consumption in `!!omap` resolution (js-yaml 3.x and 4.x) ## Summary `resolveYamlOmap()` enforces key u
Silverstripe: XSS in breadcrumbs in page list view
CVE-2026-54717
### Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view ### Reporter Fase Rai
OpenReception: Staff deletion removes pending invites cross-tenant by email match
CVE-2026-48074
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver