Nosh Chartingsystem Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Nosh Chartingsystem Project records in CISA KEV

No Nosh Chartingsystem Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Nosh Chartingsystem · all components

TI-2023-10224 CVE-2023-24610 · GHSA-hqg9-cg69-jx7j

MEDIUM 44

NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02121 Published 2023-02-01 No fix listed CWE-434

TI-2023-09842 CVE-2023-24065 · GHSA-3cfp-9cr8-v26m

LOW 25

NOSH 4a5cfdb allows stored XSS via the create user page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00571 Published 2023-01-29 No fix listed CWE-79