Opendesa

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Opendesa records in CISA KEV

No Opendesa vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Opensid · all components

TI-2018-09356 CVE-2018-13038 · GHSA-94rc-fxwq-q3h5

MEDIUM 46

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2018-07-01 No fix listed CWE-434

TI-2018-09358 CVE-2018-13040 · GHSA-v2fg-xxhv-9ch6

LOW 39

OpenSID 18.06-pasca has a CSRF vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0064 Published 2018-07-01 No fix listed CWE-352

TI-2018-09357 CVE-2018-13039 · GHSA-hvrm-924x-c9hr

LOW 29

OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-07-01 No fix listed CWE-79