Read the docs

Mecodia

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mecodia records in CISA KEV

No Mecodia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Feripro 3 records MEDIUM

Records

3 records in Feripro · all components

TI-2024-27662 CVE-2024-41518 · GHSA-7pp9-59r6-x3f6

An Incorrect Access Control vulnerability in…

Priority MEDIUM 40

An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0065 Published 2024-08-02 No fix listed CWE-284
TI-2024-27661 CVE-2024-41517 · GHSA-p64m-r26f-95x6

An Incorrect Access Control vulnerability in…

Priority LOW 31

An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding privileges.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00573 Published 2024-08-02 No fix listed
TI-2024-27663 CVE-2024-41519 · GHSA-g5wr-xh7j-3w9v

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via…

Priority LOW 25

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00375 Published 2024-08-02 No fix listed CWE-79
Open these records in search →