Security Advisories · DefectDojo/django-DefectDojo · GitHub

Security Advisories

View information about security vulnerabilities from this repository's maintainers.

DefectDojo Security Advisory: Severity Medium | Potential GitHub Authentication Misconfiguration
GHSA-hfp4-q5pg-2p7r published Feb 27, 2023 by devGregA

Moderate
Stored XSS injection when viewing uploaded files
GHSA-f82x-m585-gj24 published Jan 23, 2022 by devGregA

High
Improper access control on several objects
GHSA-v7fv-g69g-x7p2 published Jan 25, 2022 by valentijnscholten

Moderate
Stored XSS in view finding page
GHSA-fwg9-752c-qh8w published Nov 16, 2021 by devGregA

High
Improper access control on several dialogues in the user interface
GHSA-qm5q-2jrx-cch3 published Oct 5, 2021 by valentijnscholten

Moderate
API: findings and endpoint data exposed to unauthorized users
GHSA-9jr7-2hgp-vhp8 published Feb 3, 2021 by valentijnscholten

High
Product and findings metrics and reports information leak
GHSA-96vq-gqr9-vf2c published Dec 6, 2020 by valentijnscholten

Moderate
JIRA and Tool Configuration credentials exposed in plain text
GHSA-8q8j-7wc4-vjg5 published Nov 15, 2020 by madchap

Moderate