Read the docs

Daloradius

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Daloradius records in CISA KEV

No Daloradius vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Daloradius 7 records HIGH

Records

7 records in Daloradius · all components

TI-2023-00044 CVE-2023-0048 · GHSA-j489-chr2-q5vp

Code Injection in lirantal/daloradius

Priority HIGH 73

Code Injection in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30143 Published 2023-01-04 Fixed in master-branch CWE-94
TI-2022-07535 CVE-2022-23475

dalorRadius full account take over

Priority HIGH 73

daloRADIUS is an open source RADIUS web management application.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2022-12-06 No fix listed CWE-352
TI-2022-03999 CVE-2022-4366 · GHSA-4gv4-7phc-2jw7

Missing Authorization in lirantal/daloradius

Priority HIGH 66

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00748 Published 2022-12-08 Fixed in master branch CWE-862
Open these records in search →