Lenosp Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lenosp Project records in CISA KEV

No Lenosp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lenosp 2 records HIGH

Records

2 records in Lenosp · all components

TI-2023-22512 CVE-2023-42180 · GHSA-m77r-w67j-rc7m

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0…

HIGH 73

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00739 Published 2023-09-14 No fix listed CWE-434

TI-2023-22510 CVE-2023-42178 · GHSA-2fgq-8829-2c9j

Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module.

MEDIUM 62

Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00584 Published 2023-09-14 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0