Read the docs

Aleksis

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Aleksis records in CISA KEV

No Aleksis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aleksis 1 record LOW

Records

1 record

TI-2022-12142 CVE-2022-29773 · GHSA-76x2-h8h3-cwjg

An access control issue in aleksis/core/util/auth_helpers.py…

Priority LOW 30

An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0073 Published 2022-06-03 Fixed in 2.9 CWE-863
Open these records in search →