Read the docs

DumbWareio

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

DumbWareio records in CISA KEV

No DumbWareio vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-30322 CVE-2025-47929

DumbDrop vulnerable to DOM XSS via file upload

Priority MEDIUM 50

DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload functionality prior to commit db27b25372eb9071e63583d8faed2111a2b…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00412 Published 2025-05-15 No fix listed CWE-79
TI-2026-33045 CVE-2026-45230 · GHSA-7x5q-37jc-hq6p

DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file

Priority MEDIUM 45

DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by supplying ../…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00626 Published 2026-05-18 No fix listed CWE-22
TI-2026-33046 CVE-2026-45231 · GHSA-9ccf-75hj-3v32

DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields

Priority LOW 23

DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that are stored without server-side sanitization and rendere…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00186 Published 2026-05-18 No fix listed CWE-79
Open these records in search →