Approved changes feed: RSS · Atom

cpe:2.3:a:aleksis:aleksis:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAleksis (fdb5eb1a-b3bb-50ed-8496-1e05a9b111e4)
ProductAleksis (b2ca6595-5b0e-5648-af04-8c42708b2baf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/aleksis-org/aleksis purl2cpe 2026-06-01 10:15:34.375004
pkg:pypi/aleksis purl2cpe 2026-06-01 10:15:34.375006

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29773 vulnerable 2026-06-08 05:42:48.803503 Details available
An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set.
Published: 2022-06-03T20:11:07.000Z
Updated: 2024-08-03T06:33:42.833Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.