italia

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

italia records in CISA KEV

No italia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Design Comuni Italia 1 record MEDIUM

Records

3 records

TI-2025-18597 CVE-2025-24895 · GHSA-vq63-8f72-f486

SAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication

HIGH 78

CIE.AspNetCore.Authentication is an AspNetCore Remote Authenticator for CIE 3.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00607 Published 2025-02-18 Fixed in 2.1.0 CWE-287

TI-2025-18596 CVE-2025-24894 · GHSA-36h8-r92j-w9vw

SAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication

HIGH 74

SPID.AspNetCore.Authentication is an AspNetCore Remote Authenticator for SPID.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00607 Published 2025-02-18 Fixed in 3.4.0 CWE-287

TI-2025-01550 CVE-2025-1798 · GHSA-673g-crrq-7x55

Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS

MEDIUM 60

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00171 Published 2025-03-25 Fixed in 1.1.2 CWE-352

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0