Vulnerabilities (CVE)

Filtered by vendor Europeana Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6721 1 Europeana 1 Repox 2023-12-18 N/A 7.5 HIGH
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.
CVE-2023-6718 1 Europeana 1 Repox 2023-12-18 N/A 7.5 HIGH
An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.
CVE-2023-6722 1 Europeana 1 Repox 2023-12-18 N/A 7.5 HIGH
A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code or data, backend credentials, operating system files...