selenium records

4 published records for vendor selenium.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-28108No exploit	Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/fselenium · selenium grid · CWE-352 Pre-auth CSRF	High8.8	—	11.7%	Apr 18, 2022
35Monitor	CVE-2022-28109No exploit	Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding.selenium · selenium grid · CWE-352 pre-auth RCE CSRF	High8.8	—	1.1%	Apr 15, 2022
30Monitor	CVE-2023-5590No exploit	NULL Pointer Dereference in seleniumhq/seleniumselenium · selenium · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.9%	Oct 15, 2023
24Monitor	CVE-2020-23452No exploit	A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafteselenium · selenium grid · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 5, 2023

CVE-2022-28108
39Monitor
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/f
HighCVSS 8.8No exploitEPSS 12%
- Pre-auth
- CSRF
selenium · selenium gridApr 18, 2022
CVE-2022-28109
35Monitor
Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding.
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- CSRF
selenium · selenium gridApr 15, 2022
CVE-2023-5590
30Monitor
NULL Pointer Dereference in seleniumhq/selenium
HighCVSS 7.5No exploitEPSS 1%
selenium · seleniumOct 15, 2023
CVE-2020-23452
24Monitor
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafte
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
selenium · selenium gridJul 5, 2023