Ohler

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ohler records in CISA KEV

No Ohler vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Agoo · all components

TI-2022-12525 CVE-2022-30288 · GHSA-656c-777j-wp92

MEDIUM 42

Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01569 Published 2022-05-04 No fix listed

TI-2020-06190 CVE-2020-7670

LOW 35

agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0117 Published 2020-06-10 Fixed in 2.14.0 CWE-444