charmbracelet

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

charmbracelet records in CISA KEV

No charmbracelet vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Charm · all components

TI-2022-11723 CVE-2022-29180 · GHSA-4wpp-w5r4-7v5v

MEDIUM 43

A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2022-05-07 Fixed in 0.12.1 CWE-918