Jorian Woltjer

Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Ghost fails to properly enforce access controls on comments when operating in private mode. This allows unauthenticated visitors to bypass privacy settings and read comments that should be restricted.

The oEmbed preview feature fails to sandbox externally hosted scripts, allowing for untrusted script execution. An attacker can create malicious oEmbed content to execute scripts within the administrative session of a staff user, which may lead to the compromise of administrative access.

An input validation issue exists within the admin iframe. Attackers possessing content publishing privileges can create malicious pages that, when accessed by active staff users, facilitate the takeover of staff user accounts.

A privilege escalation issue exists in the notifications system. This flaw allows users with low-privilege staff access to elevate their roles to higher-privilege staff levels due to a lack of proper authorization checks.

Lack of escaping in modalreturn layouts of various components allows for Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites.

An improper access check in the `com contact` component allows a user to download vCard exports of contacts that should be inaccessible.

Insufficient validation in the MFA management views allows for Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites.

Lack of escaping in the file management view of the `com templates` component leads to a Cross-Site Scripting (XSS) issue. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.

A heap buffer overflow exists in ANGLE, a graphics abstraction layer, within Google Chrome on Mac. This issue allows a remote attacker to perform out-of-bounds memory access by inducing the browser to process a specially crafted HTML page.

An out-of-bounds read exists in ANGLE, a graphics abstraction layer. A remote attacker who has already compromised the renderer process can use a specially crafted HTML page to read potentially sensitive information from the process memory.

Insufficient policy enforcement in Payments allows a remote attacker to bypass discretionary access control, which is a mechanism that restricts access to objects based on the identity of users or groups, by using a crafted HTML page.

A side-channel information leakage issue exists in the Scroll component. This flaw allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than the one serving the malicious page, by using a specially crafted HTML page.