Crocoblock

Records130All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

Crocoblock records in CISA KEV

No Crocoblock vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jetengine · all components

TI-2021-18467 CVE-2021-41844 · GHSA-f8hr-h5q6-6wp6

MEDIUM 44

Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2021-12-15 No fix listed CWE-20

TI-2021-16191 CVE-2021-38607 · GHSA-r98m-67g6-g449

LOW 25

Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-08-16 No fix listed CWE-79