Read the docs

FOSSBilling

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

FOSSBilling records in CISA KEV

No FOSSBilling vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fossbilling 12 records HIGH

Records

12 records in Fossbilling · all components

TI-2023-03258 CVE-2023-3490 · GHSA-fx9p-2h37-fpg7

SQL Injection in fossbilling/fossbilling

Priority HIGH 82

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2023-06-30 Fixed in 0.5.3 CWE-89
TI-2023-03173 CVE-2023-3393 · GHSA-82v3-wffx-3hq8

Code Injection in fossbilling/fossbilling

Priority HIGH 67

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01034 Published 2023-06-23 Fixed in 0.5.1 CWE-94
TI-2023-03330 CVE-2023-3568 · GHSA-gh5w-4mrm-4p4c

Open Redirect in alextselegidis/easyappointments

Priority MEDIUM 61

Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00434 Published 2023-07-10 Fixed in 1.5.0 CWE-601
TI-2023-03174 CVE-2023-3394 · GHSA-wcv8-5j5x-hwh5

Session Fixation in fossbilling/fossbilling

Priority MEDIUM 60

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00506 Published 2023-06-23 Fixed in 0.5.1 CWE-384
TI-2023-03024 CVE-2023-3228 · GHSA-rphw-6wgr-jfrf

Business Logic Errors in fossbilling/fossbilling

Priority MEDIUM 59

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00476 Published 2023-06-14 Fixed in 0.5.0 CWE-840
TI-2023-03026 CVE-2023-3230 · GHSA-jj4r-r265-w7q9

Missing Authorization in fossbilling/fossbilling

Priority LOW 33

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2023-06-14 Fixed in 0.5.0 CWE-862
TI-2023-03025 CVE-2023-3229 · GHSA-98cp-876f-vj6g

Business Logic Errors in fossbilling/fossbilling

Priority LOW 29

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00509 Published 2023-06-14 Fixed in 0.5.0 CWE-840
Open these records in search →