koel

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

koel records in CISA KEV

No koel vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Koel · all components

TI-2021-12956 CVE-2021-33563 · GHSA-r37h-j483-cjjm

LOW 34

Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00809 Published 2021-05-24 Fixed in 5.1.4 CWE-916