kitodo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

kitodo records in CISA KEV

No kitodo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Kitodo.presentation · all components

TI-2022-08774 CVE-2022-24980 · GHSA-x832-r2rj-4g5p

LOW 35

An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01201 Published 2022-02-19 Fixed in 2.3.2, 3.2.3 +1 CWE-918

TI-2020-12665 CVE-2020-16095 · GHSA-fpqv-x9hm-35j9

LOW 29

The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00869 Published 2020-07-29 Fixed in 3.1.2 CWE-79