Agora-project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Agora-project records in CISA KEV

No Agora-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Agora-project 8 records HIGH

Records

8 records in Agora-project · all components

TI-2025-41120 CVE-2025-67077 · GHSA-5c4g-2g7f-vp3x

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated…

HIGH 73

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00392 Published 2026-01-15 No fix listed CWE-434

TI-2025-41119 CVE-2025-67076 · GHSA-44vf-6vfg-98jr

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing…

HIGH 72

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00879 Published 2026-01-15 No fix listed CWE-22

TI-2025-41122 CVE-2025-67079 · GHSA-73r9-c9jc-f73v

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to…

MEDIUM 49

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2026-01-15 No fix listed CWE-434

TI-2017-04339 CVE-2017-6562 · GHSA-323m-cw2j-43x4

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.

LOW 29

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2017-03-09 No fix listed CWE-79

TI-2017-04338 CVE-2017-6561 · GHSA-p9f7-j978-6gf6

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.

LOW 29

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2017-03-09 No fix listed CWE-79

TI-2017-04337 CVE-2017-6560 · GHSA-52gg-p548-p9gj

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.

LOW 29

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2017-03-09 No fix listed CWE-79

TI-2017-04336 CVE-2017-6559 · GHSA-cj9q-rfmg-xgw3

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.

LOW 29

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2017-03-09 No fix listed CWE-79

TI-2025-41121 CVE-2025-67078 · GHSA-h9pr-pv2g-cx98

Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing…

LOW 27

Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify parameter of the file controller used to display errors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00223 Published 2026-01-15 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	5
Low	0
No CVSS	0