CVE Tracker

CVE (Common Vulnerabilities and Exposures) assigned to me for identifying vulnerabilities in various open-source applications and projects.

• 🐞 CVE-2021-3866

  • ⚠️ Medium 🔎 Cross-site Scripting (XSS) - Stored in zulip/zulip 📅 Dec 18th 2021 $~~$
  • https://blog.zulip.com/2022/01/19/cve-2021-3866/

• 🐞 CVE-2021-32568

  • ⚠️ High 🔎 Deserialization of Untrusted Data in zmister2016/mrdoc 📅 Aug 29th 2021 $~~$

• 🐞 CVE-2021-3830

  • ⚠️ Low 🔎 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver 📅 Sep 6th 2021 $~~$
  • https://github.com/btcpayserver/btcpayserver/releases/tag/v1.2.3

• 🐞 CVE-2022-0602

  • ⚠️ Medium 🔎 Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter 📅 Jan 26th 2022 $~~$

• 🐞 CVE-2021-3853

  • ⚠️ Medium 🔎 Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq 📅 Jan 12th 2022 $~~$

• 🐞 CVE-2021-3841

  • ⚠️ Low 🔎 Cross-site Scripting (XSS) - Stored in Sylius/Sylius 📅 Nov 6th 2021 $~~$

• 🐞 CVE-2020-28457

  • ⚠️ Medium 🔎 Cross-site Scripting (XSS) - Stored in s-cart/s-cart 📅 Nov 15th 2020 $~~$

• 🐞 CVE-2020-28456

  • ⚠️ Medium 🔎 Cross-site Scripting (XSS) - Stored in s-cart/s-cart 📅 Nov 20th 2020 $~~$

Security Findings and Fixes

All of my other security findings and fixes, including XXE, Zip Slip, and more, are listed here. : https://huntr.com/users/b1nslashsh