Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-46863
7.5
HIGHCVSS v3
Published
October 30, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request.
Peppermint-Lab/peppermint
GitHubAn open source issue management & help desk solution. A zendesk & jira alternative
GitHubAn open source issue management & help desk solution. A zendesk & jira alternative< 0.2.4NVD