Read the docs

4MOSAn

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

4MOSAn records in CISA KEV

No 4MOSAn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gcb Doctor 2 records MEDIUM

Records

2 records

TI-2021-18768 CVE-2021-42338 · GHSA-pwgf-2vfp-fh6c

4MOSAn GCB Doctor - Improper Authorization

Priority MEDIUM 51

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05811 Published 2021-11-19 No fix listed CWE-285
TI-2021-19857 CVE-2021-44159 · GHSA-2pg3-5vwj-wh4m

4MOSAn GCB Doctor - Unrestricted Upload of File

Priority MEDIUM 48

4MOSAn GCB Doctor’s file upload function has improper user privilege control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03521 Published 2021-12-20 No fix listed CWE-434
Open these records in search →