Citadel

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Citadel records in CISA KEV

No Citadel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webcit 9 records MEDIUM Ux 3 records MEDIUM Citadel 2 records LOW Smtp 1 record MEDIUM

Records

2 records in Citadel · all components

TI-2011-01535 CVE-2011-1756 · GHSA-6px8-r2g4-9v5v

modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion…

LOW 28

modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0266 Published 2011-06-21 No fix listed CWE-399

TI-2023-23796 CVE-2023-44272 · GHSA-j24p-mq7x-2jwp

Cross-site scripting in Citadel

LOW 25

A cross-site scripting vulnerability exists in Citadel versions prior to 994.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-10-04 Fixed in 994 CWE-79

Open these records in search →

Critical	3
High	3
Medium	7
Low	2
No CVSS	0