Heartex

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Heartex records in CISA KEV

No Heartex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Label Studio 1 record LOW

Records

1 record

TI-2022-16864 CVE-2022-36551 · GHSA-pc6f-259w-w3j6

A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio…

LOW 39

A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0689 Published 2022-10-03 Fixed in 1.6.0 CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0