Advisories · Technology
PoxenStudio talebook.
Every CVE that names PoxenStudio talebook among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File
- PoxenStudio talebook
- Code injection
- CWE-829
- CVSS 6.9 Medium
MyBooks: Unauthenticated Registration Bypass via Missing Server-Side ALLOW_REGISTER Enforcement
- PoxenStudio talebook
- CWE-602
- CVSS 8.7 High
MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint
- PoxenStudio talebook
- Broken access control