Pentest Collaboration Framework Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pentest Collaboration Framework Project records in CISA KEV

No Pentest Collaboration Framework Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pentest Collaboration Framework 1 record MEDIUM

Records

1 record in Pentest Collaboration Framework · all components

TI-2021-18885 CVE-2021-42651 · GHSA-4mqj-f85p-j8j9

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework…

MEDIUM 41

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01684 Published 2022-05-11 No fix listed CWE-94

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0