Filtered by vendor Jupo
Subscriptions
Filtered by product Mezzanine
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-25169 | 1 Jupo | 1 Mezzanine | 2025-02-14 | 9.8 Critical |
| An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request. | ||||
| CVE-2024-25170 | 1 Jupo | 1 Mezzanine | 2024-11-21 | 9.1 Critical |
| An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header. | ||||
| CVE-2020-19002 | 1 Jupo | 1 Mezzanine | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632. | ||||
| CVE-2018-16632 | 1 Jupo | 1 Mezzanine | 2024-11-21 | N/A |
| Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/. | ||||
Page 1 of 1.