Approved changes feed: RSS · Atom
cpe:2.3:a:unspecified:pengu:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unspecified (6e0c47d7-4a6a-5e77-bb8d-ada54d9c4fcb) |
|---|---|
| Product | Pengu (0a24b527-2797-5b7e-b0b6-f37559cdf008) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36623 |
vulnerable | 2026-06-08 05:25:49.246872 |
Pengu index.js runApp cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file src/index.js. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The name of the patch is aea66f12b8cdfc3c8c50ad6a9c89d8307e9d0a91. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216475.
Published: 2022-12-21T00:00:00.000Z
Updated: 2025-04-15T12:55:49.525Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.