LWS

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

LWS records in CISA KEV

No LWS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Lws Tools · all components

TI-2023-12185 CVE-2023-27453 · GHSA-h7p3-c4jw-w4mv

MEDIUM 44

Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.3.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00303 Published 2023-11-22 No fix listed CWE-352

TI-2023-17864 CVE-2023-35774 · GHSA-3x6f-9g7f-wqvm

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-07-11 No fix listed CWE-352