Advisories · Weakness
CWE-148.
Every Advisory and CVE whose sources give the weakness CWE-148, newest first.
- CVSS 5.1 Medium
XLSX formula injection in exports
- pretix Venueless
- CWE-148
- CVSS 7.5 High
Panics on Malformed Untrusted Input
- Denial of service
- CWE-130
>=0.0.0-0, <0.14.1 · fixed in 0.14.1
GHSA-9rmp-2568-59rv · CVE-2024-53856 - CVSS 8.1 High
Quarkus HTTP vulnerable to incorrect evaluation of permissions
- Broken access control
- CWE-148
<2.16.11.Final || >=3.0.0, <3.2.6.Final || >=3.3.0, <3.3.3 · fixed in 2.16.11.Final, 3.2.6.Final, 3.3.3
GHSA-4f4r-wgv2-jjvg · CVE-2023-4853