Tag
Stored XSS via Unvalidated URL Scheme in @tinacms/web-components
2 TTPs 1 CVEThe @tinacms/web-components package is vulnerable to stored Cross-Site Scripting (XSS) due to a failure to validate URL schemes in the tina-markdown component, allowing attackers to execute arbitrary code in the browser context of site visitors.
TinaCMS GraphQL Path Traversal Vulnerability
2 rules 2 TTPs 1 CVEA path traversal vulnerability in @tinacms/graphql allows unauthenticated users to write and overwrite arbitrary files within the project root by manipulating the relativePath parameter in GraphQL mutations, leading to potential arbitrary code execution.
TinaCMS GraphQL Path Traversal Vulnerability
2 rules 2 TTPs 1 CVEA path traversal vulnerability in @tinacms/graphql allows unauthenticated users to write and overwrite arbitrary files within the project root by manipulating the relativePath parameter in GraphQL mutations, leading to potential arbitrary code execution.