Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Automad records in CISA KEVNo Automad vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00812 · Published 2024-07-19 · Fixed in 2.0.0-alpha.5 CWE-434
Priority MEDIUM 58
Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00519 · Published 2023-02-03 · Fixed in 1.8.0 CWE-79
Priority MEDIUM 55
A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00833 · Published 2024-08-23 · No fix listed CWE-79
Priority LOW 39
A vulnerability was found in automad up to 1.10.9.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00708 · Published 2023-12-21 · No fix listed CWE-918
Priority LOW 29
A vulnerability was found in automad up to 1.10.9.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0039 · Published 2023-12-21 · Fixed in 2.0.0-alpha.1 CWE-352
Priority LOW 26
A vulnerability has been found in automad up to 1.10.9 and classified as problematic.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00665 · Published 2022-04-29 · No fix listed CWE-79
Priority LOW 25
A vulnerability was found in automad up to 1.10.9.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00579 · Published 2023-12-21 · No fix listed CWE-434
Priority LOW 23
A vulnerability was found in automad up to 1.10.9 and classified as problematic.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0061 · Published 2023-12-21 · No fix listed CWE-79
THREATIST.IORead the docs