B3log Symphony vulnerabilities
- b3log symphony B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes 6.9 Medium
- b3log symphony An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via... 9.8 Critical
- b3log symphony b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header. 6.1 Medium
- b3log symphony In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is... 4.8 Medium
- b3log symphony Moderate severity vulnerability that affects org.b3log:symphony 6.1 Medium
- b3log symphony b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files... 9.8 Critical
- b3log symphony b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as... 5.4 Medium