TI-2025-21650 CVE-2025-30344 · GHSA-jvfr-jf2p-rc53
Observable discrepancy in Intevation OpenSlides
Priority MEDIUM 63
An issue was discovered in OpenSlides before 4.2.5.
Intevation
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Intevation records in CISA KEVNo Intevation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2025-21649 CVE-2025-30343 · GHSA-mwpv-367w-4cpc
Path traversal in Intevation OpenSlides
Priority MEDIUM 62
A directory traversal issue was discovered in OpenSlides before 4.2.5.
TI-2025-21648 CVE-2025-30342 · GHSA-6h9q-x65f-g9gv
Cross-site scripting in Intevation OpenSlides
Priority MEDIUM 60
An XSS issue was discovered in OpenSlides before 4.2.5.
TI-2025-21651 CVE-2025-30345 · GHSA-fw4x-j9wf-qmp2
Improper output encoding in Intevation OpenSlides
Priority MEDIUM 52
An issue was discovered in OpenSlides before 4.2.5.
TI-2026-20628 CVE-2026-25519
OpenSlides has incorrect access control vulnerability in authentication service
Priority MEDIUM 44
OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly.
TI-2020-16101 CVE-2020-26280
XSS in OpenSlides
Priority MEDIUM 41
OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies.
TI-2024-15167 CVE-2024-22893 · GHSA-5mvr-wqp8-rqpq
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with…
Priority LOW 39
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime.
TI-2024-15166 CVE-2024-22892 · GHSA-x829-m68r-85mm
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.
Priority LOW 32
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.