CVEs published June 10, 2023
4 CVEs were published on June 10, 2023: 0 critical, 3 high.
- Published
- 4
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- nilsteampassnet/teampass
- 2
- dottie
- 1
- owncast/owncast
- 1
High 3
- CVE-2023-26132Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and thedottie
- CVE-2023-3188Server-Side Request Forgery (SSRF) in owncast/owncastowncast/owncast
- CVE-2023-3191Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampassnilsteampassnet/teampass