AtroCore

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AtroCore records in CISA KEV

No AtroCore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Atrocore · all components

TI-2023-11849 CVE-2023-26968 · GHSA-9g5p-c7vc-45f7

HIGH 82

In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00981 Published 2023-03-29 No fix listed CWE-434