Convos

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Convos records in CISA KEV

No Convos vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Convos · all components

TI-2022-06028 CVE-2022-21650

HIGH 66

Convos is an open source multi-user chat that runs in a web browser.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00858 Published 2022-01-04 Fixed in 6.52 CWE-79

TI-2022-06027 CVE-2022-21649

HIGH 66

Convos is an open source multi-user chat that runs in a web browser.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00963 Published 2022-01-04 Fixed in 6.52 CWE-79

TI-2021-18861 CVE-2021-42584 · GHSA-r3x3-fwhm-94p7

LOW 26

A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00754 Published 2021-12-17 No fix listed CWE-79

TI-2020-11284 CVE-2020-14423 · GHSA-92jv-wxcr-6fgw

LOW 26

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01059 Published 2020-06-18 No fix listed CWE-330