Crashfix Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Crashfix Project records in CISA KEV

No Crashfix Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Crashfix · all components

TI-2018-14544 CVE-2018-20508 · GHSA-965r-pr3w-937g

MEDIUM 45

CrashFix 1.0.4 has SQL Injection via the User[status] parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2018-12-27 No fix listed CWE-89