Invenio

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Invenio records in CISA KEV

No Invenio vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Invenio-app · all components

TI-2019-16084 CVE-2019-1020006 · GHSA-94mf-xfg5-r247

LOW 29

invenio-app before 1.1.1 allows host header injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0093 Published 2019-07-29 Fixed in 1.1.1, 1.0.6 CWE-74