Approved changes feed: RSS · Atom

cpe:2.3:a:lockerproject:locker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLockerproject (0b2a138e-9bf1-539e-8602-a7616a83d862)
ProductLocker (e285e0bb-15b3-5f86-9122-405783522cf8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3951 vulnerable 2026-06-08 08:01:19.700072 LockerProject Locker Error Response registry.js authIsAwesome cross site scripting
MEDIUM (4.3)
A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0. Affected is the function authIsAwesome of the file source-code/Locker-master/Ops/registry.js of the component Error Response Handler. The manipulation of the argument ID results in cross site scripting. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-11T19:32:08.560Z
Updated: 2026-03-12T19:58:03.250Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.