correos records
2 published records for vendor correos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-552 Files or Directories Accessible to External Parties1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2022-46639No exploit | A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal.correos · correos · CWE-22 | High7.5 | — | 0.9% | Jan 23, 2023 |
30Monitor | CVE-2023-0331No exploit | Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Downloadcorreos · correos oficial · CWE-552 | High7.5 | — | 0.8% | Feb 27, 2023 |
- CVE-2022-4663930Monitor
A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal.
HighCVSS 7.5No exploitEPSS 0%correos · correosJan 23, 2023
- CVE-2023-033130Monitor
Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download
HighCVSS 7.5No exploitEPSS 0%correos · correos oficialFeb 27, 2023