bazarr records
4 published records for vendor bazarr.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2024-40348Proof of concept | An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.bazarr · bazarr · CWE-22 | High8.2 | — | 8.2% | Jul 20, 2024 |
30Monitor | CVE-2023-50264No exploit | Bazarr Arbitrary file read in /system/backup/download/ endpointbazarr · bazarr · CWE-22 | High7.5 | — | 0.9% | Dec 15, 2023 |
30Monitor | CVE-2023-50265No exploit | Bazarr Arbitrary file read in /api/swaggerui/static endpointbazarr · bazarr · CWE-22 | High7.5 | — | 0.9% | Dec 15, 2023 |
21Monitor | CVE-2023-50266No exploit | Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpointbazarr · bazarr · CWE-918 | Medium5.3 | — | 0.5% | Dec 15, 2023 |
- CVE-2024-4034834Monitor
An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.
HighCVSS 8.2Proof of conceptEPSS 8%bazarr · bazarrJul 20, 2024
- CVE-2023-5026430Monitor
Bazarr Arbitrary file read in /system/backup/download/ endpoint
HighCVSS 7.5No exploitEPSS 0%bazarr · bazarrDec 15, 2023
- CVE-2023-5026530Monitor
Bazarr Arbitrary file read in /api/swaggerui/static endpoint
HighCVSS 7.5No exploitEPSS 0%bazarr · bazarrDec 15, 2023
- CVE-2023-5026621Monitor
Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpoint
MediumCVSS 5.3No exploitEPSS 0%bazarr · bazarrDec 15, 2023