TI-2024-16284 CVE-2024-24767 · GHSA-c69x-5xmw-v44x
CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
Priority HIGH 82
CasaOS-UserService provides user management functionalities to CasaOS.
IceWhaleTech
Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
IceWhaleTech records in CISA KEVNo IceWhaleTech vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Casaos · all components
TI-2024-16282 CVE-2024-24765 · GHSA-h5gf-cmm8-cg7c
CasaOS-UserService allows unauthorized access to any file
Priority HIGH 76
CasaOS-UserService provides user management functionalities to CasaOS.
TI-2023-19077 CVE-2023-37469 · GHSA-92vc-4fcw-g68q
CasaOS Command Injection vulnerability
Priority HIGH 73
CasaOS is an open-source personal cloud system.
TI-2023-18896 CVE-2023-37266 · GHSA-m5q5-8mfw-p2hr
Weak json web token (JWT) secrets in CasaOS
Priority MEDIUM 59
CasaOS is an open-source Personal Cloud system.
TI-2023-18895 CVE-2023-37265 · GHSA-vjh7-5r6x-xh6g
Incorrect identification of source IP addresses in CasaOS
Priority MEDIUM 59
CasaOS is an open-source Personal Cloud system.
TI-2022-08122 CVE-2022-24193 · GHSA-jh63-28gx-7p26
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
Priority MEDIUM 50
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
TI-2025-24320 CVE-2025-34171 · GHSA-9w9c-6cc9-mc59
CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure
Priority LOW 38
CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information.