Kreado

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kreado records in CISA KEV

No Kreado vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2021-18900 CVE-2021-42675 · GHSA-g537-p229-pg3g

MEDIUM 47

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0254 Published 2022-06-14 No fix listed CWE-434

TI-2021-20155 CVE-2021-44581 · GHSA-hp87-594q-v5cx

LOW 35

An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01029 Published 2022-03-29 No fix listed CWE-89