Vendors / Borg Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Borg Project records in CISA KEV No Borg Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00578 · Published 2023-02-21 · No fix listed CWE-22
Priority LOW 27
Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of archives), potentially allowing an attacker to spoof the list of archives.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01273 · Published 2017-01-02 · No fix listed CWE-310
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0