Vendors / Dootask Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Dootask records in CISA KEV No Dootask vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 61
An arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary code via uploading a crafted PDF file.
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00398 · Published 2024-05-15 · No fix listed CWE-79
Priority MEDIUM 50
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.
CVSS 3.1 LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00284 · Published 2025-08-22 · No fix listed CWE-434
Priority MEDIUM 41
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00669 · Published 2025-08-22 · No fix listed CWE-434
Priority LOW 26
DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page via the input field projectDesc.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00164 · Published 2026-03-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 1 0
THREATIST.IORead the docs