AntSwordProject

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AntSwordProject records in CISA KEV

No AntSwordProject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Antsword 3 records MEDIUM

Records

3 records in Antsword · all components

TI-2020-13467 CVE-2020-18766 · GHSA-q677-wggg-h4hr

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

MEDIUM 44

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01154 Published 2020-10-26 No fix listed CWE-79

TI-2019-10419 CVE-2019-13970 · GHSA-hq75-ggc3-8h3q

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution…

LOW 31

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01874 Published 2019-07-19 Fixed in 2.1.0 CWE-79

TI-2020-15566 CVE-2020-25470 · GHSA-9mhr-wj86-g462

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site…

LOW 30

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0133 Published 2020-10-26 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0