Elide

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Elide records in CISA KEV

No Elide vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Elide 2 records MEDIUM

Records

2 records

TI-2022-08640 CVE-2022-24827 · GHSA-8xpj-9j9g-fc9r

SQL Injection in elide-datastore-aggregation

MEDIUM 40

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01389 Published 2022-04-11 Fixed in 6.1.4 CWE-89

TI-2020-04345 CVE-2020-5289 · GHSA-2mxr-89gf-rc4v

Read permissions not enforced for client provided filter expressions in Elide http client

LOW 33

In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.01251 Published 2020-03-30 Fixed in 4.5.14 CWE-285

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0