TI-2023-10690 CVE-2023-25266 · GHSA-7mjw-898c-2hq9
An issue was discovered in Docmosis Tornado prior to version 2.9.5.
Priority HIGH 79
An issue was discovered in Docmosis Tornado prior to version 2.9.5.
Docmosis
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Docmosis records in CISA KEVNo Docmosis vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2023-10689 CVE-2023-25265 · GHSA-v8p7-4m38-955w
Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure…
Priority HIGH 66
Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.
TI-2023-10688 CVE-2023-25264 · GHSA-xh63-f847-m5r7
An issue was discovered in Docmosis Tornado prior to version 2.9.5.
Priority HIGH 66
An issue was discovered in Docmosis Tornado prior to version 2.9.5.
TI-2024-28585 CVE-2024-42733 · GHSA-6m5m-3phv-f8fm
An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute…
Priority MEDIUM 51
An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input