ohler records
2 published records for vendor ohler.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2022-30288No exploit | Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash.ohler · agoo | High7.5 | — | 1.5% | May 4, 2022 |
30Monitor | CVE-2020-7670No exploit | agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable.ohler · agoo · CWE-444 | High7.5 | — | 1.1% | Jun 10, 2020 |
- CVE-2022-3028830Monitor
Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash.
HighCVSS 7.5No exploitEPSS 1%ohler · agooMay 4, 2022
- CVE-2020-767030Monitor
agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable.
HighCVSS 7.5No exploitEPSS 1%ohler · agooJun 10, 2020