Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
BlueWave records in CISA KEVNo BlueWave vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00521 · Published 2025-05-10 · No fix listed CWE-472
Priority LOW 38
In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00508 · Published 2025-05-03 · No fix listed CWE-472
Priority LOW 23
In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00359 · Published 2025-05-15 · Fixed in 2.1 CWE-497
