Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-26265
5.3
MEDIUMCVSS v3
Published
February 21, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borg_preprocess_page in the file template.php does not properly sanitize incoming path arguments before using them.
borgbackup/borg
GitHubDeduplicating archiver with compression and authenticated encryption.
GitHubDeduplicating archiver with compression and authenticated encryption.< 1.1.19NVD
backdrop-contrib/borgGitHubThe (base) theme used on Backdropcms.org and associated websites.
GitHubThe (base) theme used on Backdropcms.org and associated websites.< 1.1.19NVD