Microcks

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Microcks records in CISA KEV

No Microcks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Microcks · all components

TI-2023-26680 CVE-2023-48910 · GHSA-gqj2-324p-vx73

MEDIUM 51

Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01005 Published 2023-12-04 Fixed in 1.17.1 CWE-918

TI-2024-29661 CVE-2024-44076 · GHSA-r6ph-5fp2-3w2v

MEDIUM 50

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00603 Published 2024-08-19 Fixed in 1.10.0 CWE-269