Search for packages
| purl | pkg:gem/camaleon_cms@0.1.7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-25969
Aliases: GHSA-x78v-4fvj-rg9j |
Camaleon CMS Stored Cross-site Scripting vulnerability In “Camaleon CMS” application, versions 0.0.1 through 2.6.0 are vulnerable to stored XSS, that … | There are no reported fixed by versions. |
|
CVE-2021-25970
Aliases: GHSA-438x-2p9v-g8h9 |
Camaleon CMS Insufficient Session Expiration vulnerability Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even … | There are no reported fixed by versions. |
|
GHSA-rp28-mvq3-wf8j
Aliases: CVE-2025-2304 |
Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment A Privilege Escalation through a Mass Assignment exists in Camaleon … |
Vulnerable |
|
GHSA-x78v-4fvj-rg9j
Aliases: CVE-2021-25969 |
Camaleon CMS Stored Cross-site Scripting vulnerability In “Camaleon CMS” application, versions 0.0.1 through 2.6.0 are vulnerable to stored XSS, that … |
Vulnerable |
|
GHSA-438x-2p9v-g8h9
Aliases: CVE-2021-25970 |
Camaleon CMS Insufficient Session Expiration vulnerability Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even … |
Vulnerable |
|
GHSA-hhxg-rvc9-8726
Aliases: CVE-2024-48652 |
camaleon_cms affected by cross site scripting Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code … | There are no reported fixed by versions. |
|
GHSA-3hp8-6j24-m5gm
|
Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185) # Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-cp65-5m9r-vc2c
Aliases: CVE-2024-46987 |
Camaleon CMS vulnerable to arbitrary path traversal (GHSL-2024-183) A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users … |
Vulnerable |
|
GHSA-r9cr-qmfw-pmrc
|
Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184) A stored cross-site scripting has been found in the … |
Vulnerable |
|
GHSA-8fx8-3rg2-79xw
|
Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184) A stored cross-site scripting has been found in the … |
Vulnerable |
|
GHSA-7x4w-cj9r-h4v9
|
Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185) The [actions](https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L51-L52) defined inside of the MediaController class do … |
Vulnerable |
|
GHSA-x487-866m-p8hr
Aliases: CVE-2023-30145 |
Server-Side Template Injection in Camaleon CMS Camaleon CMS prior to 2.7.4 was discovered to contain a Server-Side Template Injection (SSTI) … |
Vulnerable |
|
CVE-2023-30145
Aliases: GHSA-x487-866m-p8hr |
Server-Side Template Injection in Camaleon CMS Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via … |
Vulnerable Vulnerable |