Approved changes feed: RSS · Atom

cpe:2.3:a:seafile:seafile:9.0.6:*:*:*:*:*:*:*

part: a version: 9.0.6 update: *

VendorSeafile (9473c929-cd73-551b-8a14-d0f85f6a5ac5)
ProductSeafile (6b1d2edb-324c-5e7d-ae2d-7d37bb1530f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/seafile purl2cpe 2026-06-01 10:16:41.369601
pkg:deb/ubuntu/seafile purl2cpe 2026-06-01 10:16:41.369603
pkg:github/haiwen/seafile purl2cpe 2026-06-01 10:16:41.369605
pkg:rpm/fedora/seafile purl2cpe 2026-06-01 10:16:41.369607
pkg:rpm/opensuse/seafile purl2cpe 2026-06-01 10:16:41.369608
pkg:sourceforge/seafile.mirror purl2cpe 2026-06-01 10:16:41.369610

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28874 vulnerable 2026-06-08 06:02:36.577436 Details available
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
Published: 2023-12-09T00:00:00.000Z
Updated: 2024-08-02T13:51:38.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28873 vulnerable 2026-06-08 06:02:36.576969 Details available
An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.
Published: 2023-12-09T00:00:00.000Z
Updated: 2024-08-02T13:51:38.957Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.