Vulnerabilities > Datenstrom
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-05-05 | CVE-2018-10758 | Cross-Site Request Forgery (CSRF) vulnerability in Datenstrom Yellow 0.7.3 The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles. | 6.5 |
2018-05-04 | CVE-2018-10726 | Cross-site Scripting vulnerability in Datenstrom Yellow 0.7.3 A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. | 5.4 |