intranda

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

intranda records in CISA KEV

No intranda vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Goobi Viewer Core 4 records MEDIUM

Records

4 records in Goobi Viewer Core · all components

TI-2020-11897 CVE-2020-15124

Path traversal in Goobi viewer Core

MEDIUM 44

In Goobi Viewer Core before version 4.8.3, a path traversal vulnerability allows for remote attackers to access files on the server via the application.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01538 Published 2020-07-22 Fixed in 4.8.3 CWE-22

TI-2023-13477 CVE-2023-29016 · GHSA-2r9r-8fcg-m38g

Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

LOW 28

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2023-04-06 Fixed in 23.03 CWE-79

TI-2023-13476 CVE-2023-29015 · GHSA-622w-995c-3c3h

Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments

LOW 28

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2023-04-06 Fixed in 23.03 CWE-79

TI-2023-13475 CVE-2023-29014 · GHSA-7v7g-9vx6-vcg2

Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter

LOW 28

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2023-04-06 Fixed in 23.03 CWE-79

Open these records in search →

Critical	5
High	2
Medium	9
Low	0
No CVSS	0