https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:15:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-8243 EUVD-2026-8243 https://cve.radiocsirt.org/vuln/euvd-2026-8243 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26446 <p>The users clientID at &#34;application passwords&#34; was not sanitized or escaped before being added to DOM. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize the user-controllable clientID parameter. No publicly available exploits are known.</p> <p>The users clientID at &#34;application passwords&#34; was not sanitized or escaped before being added to DOM. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize the user-controllable clientID parameter. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26446 https://cve.radiocsirt.org/vuln/ghsa-6vx9-wpjf-5pf7 <p>The users clientID at &#34;application passwords&#34; was not sanitized or escaped before being added to DOM. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize the user-controllable clientID parameter. No publicly available exploits are known.</p> <p>The users clientID at &#34;application passwords&#34; was not sanitized or escaped before being added to DOM. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize the user-controllable clientID parameter. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-6vx9-wpjf-5pf7 https://cve.radiocsirt.org/vuln/gsd-2023-26446 gsd-2023-26446 https://cve.radiocsirt.org/vuln/gsd-2023-26446 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003 OXAS-ADV-2023-0003 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003