These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A path traversal vulnerability has been identified in westboy CicadasCMS up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab, affecting the Template Management component. The vulnerability is triggered by manipulating the filePath argument in the TemplateController.input function, allowing for remote attacks. The exploit has been made public, and although the vendor was notified, no response was received.
A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be performed from remote. The vulnerability allows attackers to write arbitrary files, potentially leading to rem [truncated]
A cross-site scripting (XSS) vulnerability exists in westboy CicadasCMS, affecting the Search function in org/springframework/cache/support/AbstractCacheManager.java. The flaw allows remote attackers to inject malicious scripts via the 's' argument. The vulnerability has a LOW severity CVSS score of 2.1 and has been publicly disclosed with exploit availability noted. The project uses a rolling release mod [truncated]