Armanidrisi

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Armanidrisi records in CISA KEV

No Armanidrisi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Dev Blog · all components

TI-2023-05649 CVE-2023-6144 · GHSA-w9wh-97qp-xq2v

MEDIUM 40

Dev blog v1.0 allows to exploit an account takeover through the "user" cookie.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00448 Published 2023-11-20 No fix listed CWE-639

TI-2023-05647 CVE-2023-6142 · GHSA-fh8c-9pw4-5fjj

LOW 25

Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00425 Published 2023-11-20 No fix listed CWE-79