Linkstack

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Linkstack records in CISA KEV

No Linkstack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-05374 CVE-2023-5838 · GHSA-q95v-68h8-44x6

HIGH 75

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00593 Published 2023-10-29 Fixed in v4.2.9 CWE-613

TI-2023-05376 CVE-2023-5840 · GHSA-cxh2-hxrp-wmgx

HIGH 71

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00783 Published 2023-10-29 Fixed in v4.2.9 CWE-640

TI-2024-23439 CVE-2024-35451 · GHSA-qmpq-m6m5-57hh

MEDIUM 55

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00335 Published 2024-11-29 No fix listed CWE-918