Inedo

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Inedo records in CISA KEV

No Inedo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Proget · all components

TI-2017-10967 CVE-2017-14944 · GHSA-6w7c-7wm5-77rg

LOW 34

Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00863 Published 2017-09-29 No fix listed CWE-20

TI-2017-11400 CVE-2017-15608 · GHSA-jj28-m5pv-cw58

LOW 29

Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00411 Published 2018-09-26 No fix listed CWE-352