Jirafeau project

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jirafeau project records in CISA KEV

No Jirafeau project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jirafeau 10 records LOW

Records

10 records

TI-2018-08092 CVE-2018-11349 · GHSA-2qhv-j663-cr27

The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on…

LOW 39

The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00527 Published 2018-07-07 No fix listed CWE-352

TI-2018-08094 CVE-2018-11351 · GHSA-fxh5-jwc4-hgr4

script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS)…

LOW 30

script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01218 Published 2018-07-07 No fix listed CWE-79

TI-2022-12386 CVE-2022-30110 · GHSA-j2xf-p274-g8cc

The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be…

LOW 28

The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2022-05-17 Fixed in 4.4.0 CWE-79

TI-2018-09646 CVE-2018-13409 · GHSA-2f68-f59w-q82g

An issue was discovered in Jirafeau before 3.4.1.

LOW 28

An issue was discovered in Jirafeau before 3.4.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00713 Published 2018-07-06 No fix listed CWE-79

TI-2018-09645 CVE-2018-13408 · GHSA-jrjx-rmcw-mcw4

An issue was discovered in Jirafeau before 3.4.1.

LOW 28

An issue was discovered in Jirafeau before 3.4.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-07-06 No fix listed CWE-79

TI-2018-08093 CVE-2018-11350 · GHSA-4w4r-cgf7-chmp

An issue was discovered in Jirafeau before 3.4.1.

LOW 28

An issue was discovered in Jirafeau before 3.4.1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00718 Published 2018-07-07 No fix listed CWE-79

TI-2026-01163 CVE-2026-1466 · GHSA-6x3m-wxmv-rww9

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

LOW 27

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0032 Published 2026-01-28 Fixed in 4.7.1 CWE-79

TI-2025-06428 CVE-2025-7066 · GHSA-2fxj-q37f-g6jj

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

LOW 27

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00309 Published 2025-07-04 Fixed in 4.6.3 CWE-79

TI-2024-11433 CVE-2024-12326 · GHSA-hxm9-p924-7mqf

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

LOW 27

Jirafeau normally prevents browser preview for SVG files due to the possibility that manipulated SVG files could be exploited for cross site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00242 Published 2024-12-06 Fixed in 4.6.1 CWE-79

TI-2018-09644 CVE-2018-13407 · GHSA-xrjf-q592-pcrw

A CSRF issue was discovered in Jirafeau before 3.4.1.

LOW 23

A CSRF issue was discovered in Jirafeau before 3.4.1.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.00384 Published 2018-07-06 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	9
Low	0
No CVSS	0