Vendors / Kslabs Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Kslabs records in CISA KEV No Kslabs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03126 · Published 2019-10-03 · No fix listed CWE-434
Priority LOW 32
KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01565 · Published 2019-10-03 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 1 1 0 0
