Skip to content

Vendor

advanced-rest-client vulnerabilities

2 published CVES affecting advanced-rest-client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
0
Unscored
1
CISA KEV
0
Atom feed of advanced-rest-client alerts

Products

Latest advanced-rest-client CVEs

Newest publication first

  1. CVE-2024-25503 Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details p...

    Published
    MediumCVSS 4.7 EPSS 0.93%

    Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function.

  2. GHSA-v3wr-67px-44xg Execution with Unnecessary Privileges in arc-electron

    Published
    Unknown

    Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that ARC has access to from th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.