https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 10:18:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-550 certfr-2020-avi-550 https://cve.radiocsirt.org/vuln/certfr-2020-avi-550 https://cve.radiocsirt.org/vuln/cnvd-2020-51246 cnvd-2020-51246 https://cve.radiocsirt.org/vuln/cnvd-2020-51246 https://cve.radiocsirt.org/vuln/euvd-2026-43150 EUVD-2026-43150 https://cve.radiocsirt.org/vuln/euvd-2026-43150 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15789 <p>A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.</p> <p>A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15789 https://cve.radiocsirt.org/vuln/ghsa-jc3m-3wcx-qq62 <p>A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.</p> <p>A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.</p> https://cve.radiocsirt.org/vuln/ghsa-jc3m-3wcx-qq62 https://cve.radiocsirt.org/vuln/gsd-2020-15789 gsd-2020-15789 https://cve.radiocsirt.org/vuln/gsd-2020-15789 https://cve.radiocsirt.org/vuln/icsa-20-252-08 <p>The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g.&#39;by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user&#39;s client. Various actions could be triggered by running malicious JavaScript code. The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g.&#39;by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user&#39;s client. Various actions could be triggered by running malicious JavaScript code.</p> <p>The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g.&#39;by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user&#39;s client. Various actions could be triggered by running malicious JavaScript code. The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g.&#39;by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user&#39;s client. Various actions could be triggered by running malicious JavaScript code.</p> https://cve.radiocsirt.org/vuln/icsa-20-252-08