Gladys Assistant

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gladys Assistant records in CISA KEV

No Gladys Assistant vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gladys Assistant 2 records LOW

Records

3 records

TI-2026-62932 CVE-2026-93340 · GHSA-47ff-wp9w-g26c

Gladys Assistant < 5.1.0 Password Reset Link Poisoning via forgot_password Endpoint

LOW 35

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied or…

CVSS 4.0HIGH 7.4 Network No auth User interaction EPSS 0.00528 Published 2026-09-21 Fixed in 5.1.0 CWE-640

TI-2023-25650 CVE-2023-47440 · GHSA-c79f-pqgf-fhp3

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.

LOW 31

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01018 Published 2023-12-07 No fix listed CWE-22

TI-2023-23158 CVE-2023-43256 · GHSA-r67g-g678-mjx5

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to…

LOW 30

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2023-09-25 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0