flute-cms records
3 published records for vendor flute-cms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2024-6945No exploit | Flute CMS Avatar Upload Page ImagesController.php unrestricted uploadflute-cms · flute · CWE-434 | Medium5.3 | — | 0.5% | Jul 21, 2024 |
20Monitor | CVE-2024-6946No exploit | Flute CMS list code injectionflute-cms · flute · CWE-94 | Medium5.1 | — | 0.6% | Jul 21, 2024 |
20Monitor | CVE-2024-6947No exploit | Flute CMS Notification ContentParser.php replaceContent code injectionflute-cms · flute · CWE-94 | Medium5.1 | — | 0.5% | Jul 21, 2024 |
- CVE-2024-694521Monitor
Flute CMS Avatar Upload Page ImagesController.php unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%flute-cms · fluteJul 21, 2024
- CVE-2024-694620Monitor
Flute CMS list code injection
MediumCVSS 5.1No exploitEPSS 0%flute-cms · fluteJul 21, 2024
- CVE-2024-694720Monitor
Flute CMS Notification ContentParser.php replaceContent code injection
MediumCVSS 5.1No exploitEPSS 0%flute-cms · fluteJul 21, 2024