Csaf-validator-lib Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Csaf-validator-lib Project records in CISA KEV

No Csaf-validator-lib Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Csaf-validator-lib 2 records LOW

Records

2 records

TI-2022-23739 CVE-2022-47925 · GHSA-h22p-qvm6-c9p5

Insufficient Input Validation in the Endpoint of the csaf-validator-service

LOW 35

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00924 Published 2023-03-27 Fixed in 0.1.0 CWE-20

TI-2022-23738 CVE-2022-47924 · GHSA-32w3-98f9-fhjm

Arbitrary Code Execution using the validate function of csaf-validator-lib

LOW 30

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the us…

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.00261 Published 2023-03-27 Fixed in 0.1.0 CWE-20

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0