Read the docs

Apache2triad

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Apache2triad records in CISA KEV

No Apache2triad vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Apache2triad 4 records MEDIUM

Records

4 records

TI-2017-09614 CVE-2017-12970 · GHSA-cg76-v6hw-6p7j

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote…

Priority MEDIUM 42

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to php…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2017-08-23 No fix listed CWE-352
TI-2006-00137 CVE-2006-0144 · GHSA-j5qr-fr9w-5pj5

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad…

Priority LOW 36

The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified ve…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01827 Published 2006-01-09 No fix listed CWE-94
Open these records in search →