Melisplatform vulnerabilities
We track 3 vulnerabilities in Melisplatform products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2022.
Latest Melisplatform vulnerabilities
- 9.8 Critical severity
melis-front: Deserialization of Untrusted Data
MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-front`, and u
- 9.8 Critical severity
melis-cms: Deserialization of Untrusted Data
MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-cms`, and ultimately leads to the exe
- 7.5 High severity
melis-asset-manager: Improper Limitation of a Pathname to a Restricted Directory
MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of `melisplatform/melis-asset-manager`, leading to the disclosure of sensitive information. Conduc