Obs-server

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Obs-server records in CISA KEV

No Obs-server vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Obs-server · all components

TI-2010-03594 CVE-2010-3782 · GHSA-6h5m-c899-vgw5

MEDIUM 40

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01091 Published 2020-01-02 No fix listed CWE-863