mateus
| Name | mateus |
|---|---|
| Signup | 10/08/2026 |
| Community Points | 30 |
| Commits | 0 |
| Submits | 0 |
| Posts | 6 |
| Upvote | 0 |
| Rank | Novice |
| Activity Badges | 💬 Commentator |
Posts (6)
Timeline (6)
The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.
| Date | Entry | CVE | Comment | V | Status |
|---|---|---|---|---|---|
| 10/09/2026 | 319315 | CVE-2025-8787 | Vendor statement (Portabilis) This stored XSS has been fixed in i-Diário. The values submitted in the discipline content record endpoint (the activity register and content fields) were later rendered on the record's History screen. Audited values sh… | 0 | Accepted |
| 10/09/2026 | 319314 | CVE-2025-8786 | Vendor statement (Portabilis) This stored XSS has been fixed in i-Diário. The values submitted in the knowledge-area content record endpoint (the activity register and content fields) were later rendered on the record's History screen. Audited value… | 0 | Accepted |
| 10/09/2026 | 318610 | CVE-2025-8511 | Vendor statement (Portabilis) This stored XSS has been fixed in i-Diário. The value submitted in the "Observações > Descrição" field of the observation diary endpoint was later rendered on the record's History screen. Audited values shown on tha… | 0 | Accepted |
| 10/09/2026 | 316985 | CVE-2025-7872 | Vendor statement (Portabilis) This stored XSS has been fixed in i-Diário. The value submitted in the "Justificativa" field of the absence justification endpoint was later rendered on the record's History screen. Audited values shown on that screen a… | 0 | Accepted |
| 10/09/2026 | 316984 | CVE-2025-7871 | Vendor statement (Portabilis) This reflected XSS in the content autocomplete (/conteudos, parameter filter[by_description]) has been fixed in i-Diário. The searched term is now rendered escaped in the autocomplete widget, and the content tags are re… | 0 | Accepted |
| 10/09/2026 | 316983 | CVE-2025-7870 | Vendor statement (Portabilis) This stored XSS via SVG upload has been fixed in i-Diário. The attachment uploader now rejects files whose declared content type indicates executable or markup content: image/svg+xml, text/html and application/xhtml+xml… | 0 | Accepted |