Dev Blog Dev Blog
2 CVEs affecting Dev Blog Dev Blog. Latest disclosed: 2023-11-21. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6144 | Critical | 9.1 | 2023-11-21 | Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their usern… |
CVE-2023-6142 | Medium | 5.4 | 2023-11-21 | Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malici… |