Monero Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Monero Project records in CISA KEV

No Monero Project vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24228 CVE-2025-34060 · GHSA-w4vr-ppq6-f2xg

Monero Forum Remote Code Execution via Arbitrary File Read and Cookie Forgery

HIGH 76

A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00798 Published 2025-07-01 No fix listed CWE-20

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0