Freshdns Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Freshdns Project records in CISA KEV

No Freshdns Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Freshdns 2 records LOW

Records

2 records

TI-2018-16067 CVE-2018-1000846 · GHSA-94mh-vc33-xwv4

FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF)…

LOW 39

FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API calls in index.php / class.manager.php that can result in Editing domains and zones with victim's pr…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00621 Published 2018-12-20 No fix listed CWE-352

TI-2018-16068 CVE-2018-1000847 · GHSA-h7p6-gcj3-4r6j

FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in…

LOW 26

FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00826 Published 2018-12-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0