https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:05:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-8261 EUVD-2026-8261 https://cve.radiocsirt.org/vuln/euvd-2026-8261 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26448 <p>Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize jslob content for those locations to avoid redirects to malicious content. No publicly available exploits are known.</p> <p>Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize jslob content for those locations to avoid redirects to malicious content. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26448 https://cve.radiocsirt.org/vuln/ghsa-prhg-xpp4-c8mx <p>Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize jslob content for those locations to avoid redirects to malicious content. No publicly available exploits are known.</p> <p>Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We now sanitize jslob content for those locations to avoid redirects to malicious content. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-prhg-xpp4-c8mx https://cve.radiocsirt.org/vuln/gsd-2023-26448 gsd-2023-26448 https://cve.radiocsirt.org/vuln/gsd-2023-26448 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003 OXAS-ADV-2023-0003 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003