Netflix

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Netflix records in CISA KEV

No Netflix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dispatch 3 records HIGH Chaos Monkey 2 records LOW Lemur 2 records MEDIUM Conductor 1 record MEDIUM Consoleme 1 record MEDIUM Dial Reference 1 record LOW E2nest 1 record MEDIUM Hollow 1 record LOW

Records

3 records in Dispatch · all components

TI-2023-21044 CVE-2023-40171

Dispatch writes JWT tokens in error message

HIGH 78

Dispatch is an open source security incident management tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00935 Published 2023-08-17 Fixed in 20230817 CWE-209

TI-2020-07439 CVE-2020-9300 · GHSA-64rv-h943-wm6q

The Access Control issues include allowing a regular user to view a restricted incident…

LOW 31

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00943 Published 2020-11-09 Fixed in v20201106

TI-2020-07438 CVE-2020-9299 · GHSA-wgmg-xwg9-fhqf

Cross-site scripting in Netflix Dispatch

LOW 25

There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0057 Published 2020-11-09 Fixed in v20201106 CWE-79

Open these records in search →

Critical	8
High	12
Medium	14
Low	0
No CVSS	0