Dominique RIGHETTO

Origin validation error in the connect-xcors npm package

XML External Entity (XXE) Injection in CyberELF NanoXML

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

The feature to manage resources is prone to Cross-Site Request Forgery attacks

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

The feature to import a survey is prone to stored Cross-Site Script attacks