Suggestions search

Untriaged

Filter by:

With package: haskellPackages.wai-session-clientsession

Found 2 matching suggestions

View:

Compact

Detailed

Permalink CVE-2025-31746

6.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Think201 Clients allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clients: from n/a through 1.1.4.

References

https://patchstack.com/database/wordpress/plugin/clients/vulnerability/wordpres… vdb-entry

Affected products

clients

=<1.1.4

Matching in nixpkgs

pkgs.xlsclients

Utility to list client applications running on a X11 display

nixos-unstable -
- nixpkgs-unstable 1.1.5

pkgs.argus-clients

Clients for ARGUS

nixos-unstable -
- nixpkgs-unstable 3.0.8.3

pkgs.xorg.xlsclients

Utility to list client applications running on a X11 display

nixos-unstable -
- nixpkgs-unstable 1.1.5

pkgs.haskellPackages.clientsession

Securely store session data in a client-side cookie

nixos-unstable -
- nixpkgs-unstable 0.9.3.0

pkgs.haskellPackages.wai-session-clientsession

Session store based on clientsession

nixos-unstable -
- nixpkgs-unstable 0.1

Package maintainers

@leenaars Michiel Leenaars <ml.software@leenaa.rs>

Permalink CVE-2024-54245

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients allows Stored XSS.This issue affects Clients: from n/a through 1.1.4.