Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Datenstrom Subscribe
Filtered by product Yellow
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10758 1 Datenstrom 1 Yellow 2018-06-12 5.8 MEDIUM 6.5 MEDIUM
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.
CVE-2018-10726 1 Datenstrom 1 Yellow 2018-06-05 3.5 LOW 5.4 MEDIUM
** DISPUTED ** A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS.