Kareadita

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kareadita records in CISA KEV

No Kareadita vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Kavita · all components

TI-2022-03662 CVE-2022-3993 · GHSA-9wc2-mv76-38jp

HIGH 82

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2022-11-14 Fixed in 0.6.0.3 CWE-307

TI-2022-03617 CVE-2022-3945 · GHSA-hmq2-8vrf-9w7q

MEDIUM 57

Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01341 Published 2022-11-11 Fixed in 0.6.0.3 CWE-307

TI-2023-00871 CVE-2023-0919 · GHSA-rmqg-g429-35r5

LOW 36

Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00484 Published 2023-02-19 Fixed in 0.7.0 CWE-306

TI-2022-02553 CVE-2022-2756 · GHSA-v6vr-jvvr-p4m5

LOW 35

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03472 Published 2022-08-10 Fixed in 0.5.4.1 CWE-918