Narou Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Narou Project records in CISA KEV

No Narou Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2021-14248 CVE-2021-35514 · GHSA-gwrj-88fp-5m36

MEDIUM 45

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01441 Published 2021-06-28 Fixed in 3.8.0 CWE-94