Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 20:28:15 +0000 bdu:2024-05039 https://cve.radiocsirt.org/vuln/bdu:2024-05039 bdu:2024-05039 https://cve.radiocsirt.org/vuln/bdu:2024-05039 EUVD-2026-159498 https://cve.radiocsirt.org/vuln/euvd-2026-159498 EUVD-2026-159498 https://cve.radiocsirt.org/vuln/euvd-2026-159498 fkie_cve-2024-26148 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26148 <p>Querybook is a user interface for querying big data. Prior to version 3.31.1, there is a vulnerability in Querybook&#39;s rich text editor that enables users to input arbitrary URLs without undergoing necessary validation. This particular security flaw allows the use of `javascript:` protocol which can potentially trigger arbitrary client-side execution. The most extreme exploit of this flaw could occur when an admin user unknowingly clicks on a cross-site scripting URL, thereby unintentionally compromising admin role access to the attacker. A patch to rectify this issue has been introduced in Querybook version `3.31.1`. The fix is backward compatible and automatically fixes existing DataDocs. There are no known workarounds for this issue, except for manually checking each URL prior to clicking on them.</p> <p>Querybook is a user interface for querying big data. Prior to version 3.31.1, there is a vulnerability in Querybook&#39;s rich text editor that enables users to input arbitrary URLs without undergoing necessary validation. This particular security flaw allows the use of `javascript:` protocol which can potentially trigger arbitrary client-side execution. The most extreme exploit of this flaw could occur when an admin user unknowingly clicks on a cross-site scripting URL, thereby unintentionally compromising admin role access to the attacker. A patch to rectify this issue has been introduced in Querybook version `3.31.1`. The fix is backward compatible and automatically fixes existing DataDocs. There are no known workarounds for this issue, except for manually checking each URL prior to clicking on them.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-26148 gsd-2024-26148 https://cve.radiocsirt.org/vuln/gsd-2024-26148 gsd-2024-26148 https://cve.radiocsirt.org/vuln/gsd-2024-26148