Cozy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cozy records in CISA KEV

No Cozy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cozy 1 record LOW

Records

1 record in Cozy · all components

TI-2018-04982 CVE-2018-6824 · GHSA-p8q6-h3fm-7g2m

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via…

LOW 29

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"attacker@example.…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2018-02-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0