Vendors / Burden Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Burden Project records in CISA KEV No Burden Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16075 · Published 2014-01-26 · No fix listed CWE-287
Priority LOW 29
Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00775 · Published 2022-02-15 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 1 0 0
