MOPS

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

MOPS records in CISA KEV

No MOPS vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-36900 CVE-2024-55585 · GHSA-7mg4-gj65-xwc3

Missing authentication in moPS

MEDIUM 41

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.0042 Published 2025-06-07 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0