Droppy Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Droppy Project records in CISA KEV

No Droppy Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Droppy · all components

TI-2016-08571 CVE-2016-10529 · GHSA-rhvc-x32h-5526

LOW 39

Droppy versions <3.5.0 does not perform any verification for cross-domain websocket requests.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2018-05-31 Fixed in 3.5.0 CWE-352

TI-2020-06274 CVE-2020-7757 · GHSA-grv5-w5vr-8h98

LOW 32

This affects all versions of package droppy.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01567 Published 2020-11-02 No fix listed CWE-22