Read the docs

Opft

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Opft records in CISA KEV

No Opft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2024-01902 CVE-2024-2045 · GHSA-rr36-3hq5-mqj8

Session 1.17.5 - LFR via chat attachment

Priority MEDIUM 58

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00333 Published 2024-02-29 No fix listed CWE-22
TI-2022-01814 CVE-2022-1955 · GHSA-phvj-gf52-xmvx

Improper authentication in Session

Priority LOW 21

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00361 Published 2022-06-30 No fix listed CWE-287
Open these records in search →