HRSALE

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

HRSALE records in CISA KEV

No HRSALE vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Hrsale · all components

TI-2020-17027 CVE-2020-27993 · GHSA-xhpr-rcx8-q343

LOW 29

Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02536 Published 2020-10-29 No fix listed CWE-22

TI-2020-17546 CVE-2020-29053 · GHSA-m74v-w86v-39q5

LOW 28

HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00696 Published 2020-11-24 No fix listed CWE-79