flyte records

4 published records for vendor flyte.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2023-41891No exploit	FlyteAdmin SQL Injection in List Filtersflyte · flyteadmin · CWE-89 SQL injection	High8.8	—	0.9%	Oct 30, 2023
33Monitor	CVE-2022-24856Proof of concept	Server-Side Request Forgery in FlyteConsoleflyte · flyte console · CWE-918 Pre-auth SSRF	High7.5	—	10.5%	May 17, 2022
30Monitor	CVE-2022-39273No exploit	Default OAuth Authorization Server secret in FlyteAdminflyte · flyteadmin · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.8%	Oct 6, 2022
26Monitor	CVE-2022-31145No exploit	Insufficient AccessToken Expiration Check in FlyteAdminflyte · flyteadmin · CWE-613	Medium6.5	—	1.0%	Jul 13, 2022

CVE-2023-41891
35Monitor
FlyteAdmin SQL Injection in List Filters
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
flyte · flyteadminOct 30, 2023
CVE-2022-24856
33Monitor
Server-Side Request Forgery in FlyteConsole
HighCVSS 7.5Proof of conceptEPSS 10%
- Pre-auth
- SSRF
flyte · flyte consoleMay 17, 2022
CVE-2022-39273
30Monitor
Default OAuth Authorization Server secret in FlyteAdmin
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
flyte · flyteadminOct 6, 2022
CVE-2022-31145
26Monitor
Insufficient AccessToken Expiration Check in FlyteAdmin
MediumCVSS 6.5No exploitEPSS 1%
flyte · flyteadminJul 13, 2022