Vendors / lirantal Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now lirantal records in CISA KEV No lirantal vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Code Injection in GitHub repository lirantal/daloradius prior to master-branch.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.30143 · Published 2023-01-04 · Fixed in master-branch CWE-94
Priority HIGH 73
daloRADIUS is an open source RADIUS web management application.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00485 · Published 2022-12-06 · No fix listed CWE-352
Priority HIGH 70
Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package…
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00439 · Published 2025-05-16 · Fixed in 5.9.2 CWE-179
Priority HIGH 66
Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00748 · Published 2022-12-08 · Fixed in master branch CWE-862
Priority HIGH 65
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01086 · Published 2023-01-04 · Fixed in master-branch CWE-641
Priority MEDIUM 60
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00482 · Published 2023-01-17 · Fixed in master-branch CWE-79
Priority MEDIUM 60
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00482 · Published 2023-01-17 · Fixed in master-branch CWE-79
Priority MEDIUM 57
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00672 · Published 2022-12-21 · Fixed in master CWE-1004
Open these records in search → All records by CVSS severity
Critical0 High4 Medium4 Low0 No CVSS0