Advisories · Technology
wanderer.
Every CVE that names wanderer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access
- wanderer
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML
- wanderer
- Cross-site scripting (XSS)
- CVSS 7.6 High
Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)
- wanderer
- Cross-site scripting (XSS)
- CVSS 7.5 High
Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints
- wanderer
- Broken access control