freetakserver-ui project kayıtları

freetakserver-ui project üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %33,3
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-25510İstismar yok	FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalfreetakserver-ui project · freetakserver-ui · CWE-798 Kimlik doğrulama atlatma Gömülü kimlik bilgisi	Yüksek8,8	—	%1,0	10 Mar 2022
30İzleyin	CVE-2022-25512İstismar yok	FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.freetakserver-ui project · freetakserver-ui · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%1,0	10 Mar 2022
30İzleyin	CVE-2022-25508İstismar yok	An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial ofreetakserver-ui project · freetakserver-ui · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma Hizmet dışı bırakma	Yüksek7,5	—	%1,0	10 Mar 2022
26İzleyin	CVE-2022-25506İstismar yok	FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.freetakserver-ui project · freetakserver-ui · CWE-89 SQL enjeksiyonu	Orta6,5	—	%0,8	10 Mar 2022
26İzleyin	CVE-2022-25511İstismar yok	An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywfreetakserver-ui project · freetakserver-ui	Orta6,5	—	%0,7	10 Mar 2022
21İzleyin	CVE-2022-25507İstismar yok	FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.freetakserver-ui project · freetakserver-ui · CWE-79 XSS	Orta5,4	—	%0,4	10 Mar 2022

CVE-2022-25510
35İzleyin
FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escal
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulama atlatma
- Gömülü kimlik bilgisi
freetakserver-ui project · freetakserver-ui10 Mar 2022
CVE-2022-25512
30İzleyin
FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
freetakserver-ui project · freetakserver-ui10 Mar 2022
CVE-2022-25508
30İzleyin
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial o
YüksekCVSS 7,5İstismar yokEPSS %1
freetakserver-ui project · freetakserver-ui10 Mar 2022
CVE-2022-25506
26İzleyin
FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.
OrtaCVSS 6,5İstismar yokEPSS %0
- SQL enjeksiyonu
freetakserver-ui project · freetakserver-ui10 Mar 2022
CVE-2022-25511
26İzleyin
An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anyw
OrtaCVSS 6,5İstismar yokEPSS %0
freetakserver-ui project · freetakserver-ui10 Mar 2022
CVE-2022-25507
21İzleyin
FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
freetakserver-ui project · freetakserver-ui10 Mar 2022