Scrutinizer
Approved changes feed: RSS · Atom
cpe:2.3:a:plixer:scrutinizer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Plixer (930bb988-d88b-5234-aaa1-a79c613b438e) |
|---|---|
| Product | Scrutinizer (8e781cd7-41fc-5f57-a744-9863b60dd3ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41263 |
vulnerable | 2026-06-08 06:11:05.684076 |
Details available
An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information.
Published: 2023-10-12T00:00:00.000Z
Updated: 2024-09-18T18:31:47.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41262 |
vulnerable | 2026-06-08 06:11:05.683608 |
Details available
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.
Published: 2023-10-12T00:00:00.000Z
Updated: 2024-09-18T18:37:46.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41261 |
vulnerable | 2026-06-08 06:11:05.682931 |
Details available
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results.
Published: 2023-10-12T00:00:00.000Z
Updated: 2024-09-18T14:24:24.567Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.