Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2023-46944
Disclosure Date: November 28, 2023 (last updated December 05, 2023)
An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component.
0
Attacker Value
Unknown
CVE-2023-0619
Disclosure Date: February 01, 2023 (last updated October 08, 2023)
The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations.
0
Attacker Value
Unknown
CVE-2022-38454
Disclosure Date: September 23, 2022 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
0
Attacker Value
Unknown
CVE-2022-1561
Disclosure Date: July 29, 2022 (last updated February 24, 2025)
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, but the consumed backend might be vulnerable.
0
