www-apps

Security Bug Reports

• www-apps/piwigo: SQL injections, XSS

  828581 - Assigned to Gentoo Security
• <www-apps/wordpress-5.8.3: multiple vulnerabilities

  830715 - Assigned to Gentoo Security
• www-apps/chromedriver-bin: CSRF to code execution

  833160 - Assigned to Gentoo Security
• www-apps/piwigo: multiple vulnerabilities

  847979 - Assigned to Gentoo Security
• <www-apps/nextcloud-{23.0.6,24.0.2}: multiple vulnerabilities

  864439 - Assigned to Gentoo Security
• www-apps/moodle: XSS via crafted topic fields

  870040 - Assigned to Gentoo Security
• <www-apps/nextcloud-{23.0.10,24.0.6}: multiple vulnerabilities

  878491 - Assigned to Gentoo Security
• <www-apps/nextcloud-{23.0.11,24.0.7,25.0.1}: multiple vulnerabilities

  883683 - Assigned to Gentoo Security
• <www-apps/moodle-{3.11.12,4.0.6}: multiple vulnerabilities

  883691 - Assigned to Gentoo Security
• www-apps/wordpress: SSRF

  886027 - Assigned to Gentoo Security
• www-apps/mediawiki: multiple vulnerabilities

  890373 - Assigned to Gentoo Security
• <www-apps/nextcloud-{24.0.9,25.0.3}: multiple vulnerabilities

  897918 - Assigned to Gentoo Security
• <www-apps/nextcloud-{24.0.10,25.0.4}: multiple vulnerabilities

  903149 - Assigned to Gentoo Security
• <www-apps/mediawiki-{1.38.6,1.39.3}: multiple vulnerabilities

  903622 - Assigned to Gentoo Security
• <www-apps/nextcloud-{24.0.11,25.0.5}: multiple vulnerabilities

  904941 - Assigned to Gentoo Security
• <www-apps/miniflux-2.0.43: multiple vulnerabilities

  904991 - Assigned to Gentoo Security
• <www-apps/nextcloud-{25.0.6,26.0.1}: text session not destroyed on logout

  907268 - Assigned to Gentoo Security
• www-apps/moodle: XSS in headers and footers

  908086 - Assigned to Gentoo Security
• <www-apps/mediawiki-{1.39.5,1.40.1}: multiple vulnerabilities

  916517 - Assigned to Gentoo Security
• <www-apps/nextcloud-{25.0.13,26.0.8,27.1.3}

  918422 - Assigned to Gentoo Security
• <www-apps/mediawiki-{1.39.6,1.40.2}: group-.*-member messages are not properly escaped on Special:log/rights

  920504 - Assigned to Gentoo Security
• <www-apps/gitea-1.21.5: allows anonymous container access if RequireSignInView is enabled

  925023 - Assigned to Gentoo Security