Opencollective

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Opencollective records in CISA KEV

No Opencollective vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Alf.io · all components

TI-2023-00286 CVE-2023-0301 · GHSA-rh8m-jh32-vpcr

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2023-01-14 Fixed in Alf.io 2.0-M4-2301 CWE-79

TI-2023-00285 CVE-2023-0300 · GHSA-gr7w-282r-wq4h

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00508 Published 2023-01-14 Fixed in 2.0-M4-2301 CWE-79