https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 22:31:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-112983 EUVD-2026-112983 https://cve.radiocsirt.org/vuln/euvd-2026-112983 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5358 <p>The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.</p> <p>The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-5358 https://cve.radiocsirt.org/vuln/ghsa-qcrh-hq25-p92m <p>The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.</p> <p>The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.</p> https://cve.radiocsirt.org/vuln/ghsa-qcrh-hq25-p92m https://cve.radiocsirt.org/vuln/gsd-2012-5358 gsd-2012-5358 https://cve.radiocsirt.org/vuln/gsd-2012-5358