Autumn Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Autumn Project records in CISA KEV

No Autumn Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Autumn 1 record LOW

Records

1 record

TI-2020-13532 CVE-2020-19137 · GHSA-6q4x-rgwv-967m

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain…

LOW 35

Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00942 Published 2021-09-08 No fix listed CWE-312

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0