hestiacp

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

hestiacp records in CISA KEV

No hestiacp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Hestiacp · all components

TI-2023-04678 CVE-2023-5084 · GHSA-g8c4-rhfw-rcpw

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-09-20 Fixed in 1.8.8 CWE-79

TI-2023-04169 CVE-2023-4517 · GHSA-7w44-2mwh-vhjr

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2023-10-13 Fixed in 1.8.6 CWE-79

TI-2021-10649 CVE-2021-30070 · GHSA-7qw8-c2p4-4gxq

LOW 34

An issue was discovered in HestiaCP before v1.3.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00788 Published 2022-08-18 No fix listed