@apostrophecms/import-export vulnerabilities (npm)
10 vulnerabilities.
-
@apostrophecms/import-exportnpm ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export 7.5 High -
@apostrophecms/import-exportnpm ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test 5.3 Medium -
@apostrophecms/import-exportnpm ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document 5.4 Medium -
@apostrophecms/import-exportnpm ApostropheCMS: Import API bypasses publication roles for protected content 6.5 Medium -
@apostrophecms/import-exportnpm ApostropheCMS: Missing Authentication in `cleanExport` Route 3.1 Low -
@apostrophecms/import-exportnpm ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content 6.5 Medium -
@apostrophecms/import-exportnpm ApostropheCMS: Import archives can exhaust server storage and deny service 6.5 Medium -
@apostrophecms/import-exportnpm ApostropheCMS: Exposure of Sensitive Information via predictable export filenames 6.0 Medium -
@apostrophecms/import-exportnpm ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal 6.5 Medium -
@apostrophecms/import-exportnpm ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction 10.0 Critical