Arrowjs

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Arrowjs records in CISA KEV

No Arrowjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Arrowcms · all components

TI-2024-28670 CVE-2024-42914 · GHSA-pr2m-hg7m-28mp

HIGH 80

A host header injection vulnerability exists in the forgot password functionality of ArrowCMS version 1.0.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00596 Published 2024-08-23 No fix listed CWE-74