Clockwork Web Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Clockwork Web Project records in CISA KEV

No Clockwork Web Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Clockwork Web · all components

TI-2023-10488 CVE-2023-25015 · GHSA-p4xx-w6fr-c4w9

LOW 29

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00358 Published 2023-02-02 Fixed in 0.1.2 CWE-652