Opentrade Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Opentrade Project records in CISA KEV

No Opentrade Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Opentrade 2 records MEDIUM

Records

2 records in Opentrade · all components

TI-2019-13874 CVE-2019-19250 · GHSA-2w76-4r82-v23p

OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js.

MEDIUM 44

OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2019-11-25 No fix listed CWE-89

TI-2020-05553 CVE-2020-6847 · GHSA-qc28-cr6x-h8vv

OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an…

LOW 26

OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00927 Published 2020-01-11 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0