Fossil-scm

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fossil-scm records in CISA KEV

No Fossil-scm vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-15086 CVE-2020-24614 · GHSA-83fw-5hmv-mmqf

MEDIUM 44

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03122 Published 2020-08-25 No fix listed CWE-862

TI-2021-14730 CVE-2021-36377 · GHSA-4cqm-xv6v-78c5

LOW 34

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2021-07-12 No fix listed CWE-295

TI-2022-14996 CVE-2022-34009 · GHSA-3632-grrp-f8wr

LOW 25

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00363 Published 2022-07-27 No fix listed CWE-79