Filtered by vendor Cerebrate-project
Subscribe
Total
9 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-28883 | 1 Cerebrate-project | 1 Cerebrate | 2025-02-19 | N/A | 9.8 CRITICAL |
|
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
|
|||||
| CVE-2023-41908 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | N/A | 5.3 MEDIUM |
|
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
|
|||||
| CVE-2023-41363 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | N/A | 4.3 MEDIUM |
|
In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
|
|||||
| CVE-2023-26468 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | N/A | 9.1 CRITICAL |
|
Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
|
|||||
| CVE-2022-25321 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
|
An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
|
|||||
| CVE-2022-25320 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
|
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
|
|||||
| CVE-2022-25319 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
|
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
|
|||||
| CVE-2022-25318 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | 4.0 MEDIUM | 4.3 MEDIUM |
|
An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups.
|
|||||
| CVE-2022-25317 | 1 Cerebrate-project | 1 Cerebrate | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
|
An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-controlled description.
|
|||||