Allskyteam

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Allskyteam records in CISA KEV

No Allskyteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Allsky 3 records HIGH

Records

3 records

TI-2025-39303 CVE-2025-63414 · GHSA-8259-wq47-7hr3

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an…

HIGH 82

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01846 Published 2025-12-16 No fix listed CWE-22

TI-2025-40401 CVE-2025-65573 · GHSA-88wg-48f3-4qgx

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_status.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00332 Published 2025-12-09 No fix listed CWE-352

TI-2025-40400 CVE-2025-65572 · GHSA-8gcw-g9gc-6j5r

Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows…

LOW 28

Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to execute arbitrary code via the (1) config, (2) filename, or (3) extratext parameter to allskySettings.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2025-12-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0