Web Technologies Change Detection

changedetection.io has an Authentication Bypass via Decorator Ordering

changedetection.io: Zip Slip vulnerability in the backup restore functionality

changedetection.io: XPath - Arbitrary File Read via unparsed-text()

changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

changedetection.io: XXE vulnerability in the changedetection.io project

changedetection.io: Arbitrary Local File Read via crafted backup restore

ChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

changedetection.io: Reflected XSS in RSS Tag Error Response

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the "Add a new change detection watch" function.

changedetection.io vulnerable to unauthenticated static path traversal

changedetection.io API endpoint is not secured with API token