Read the docs

Beaker-project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Beaker-project records in CISA KEV

No Beaker-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Beaker 3 records LOW

Records

3 records in Beaker · all components

TI-2015-02794 CVE-2015-3162 · GHSA-g42q-56q7-436g

Cross-site scripting (XSS) vulnerability in the edit comment dialog in…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the edit comment dialog in bkr/server/widgets.py in Beaker 20.1 allows remote authenticated users to inject arbitrary web script or HTML via writing a crafted comment on an ack…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00929 Published 2017-09-06 No fix listed CWE-79
TI-2015-02792 CVE-2015-3160 · GHSA-3qjf-f83f-x2pm

XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1…

Priority LOW 23

XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to obtain sensitive information via submitting job XML to the server containing entity references whic…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01284 Published 2017-09-06 No fix listed CWE-611
Open these records in search →