Pghero Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pghero Project records in CISA KEV

No Pghero Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2020-12781 CVE-2020-16253 · GHSA-v6fx-752r-ccp2

LOW 36

The PgHero gem through 2.6.0 for Ruby allows CSRF.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00465 Published 2020-08-05 Fixed in 2.7.0 CWE-352

TI-2023-08806 CVE-2023-22626 · GHSA-vf99-xw26-86g5

LOW 34

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00871 Published 2023-01-05 Fixed in 3.1.0 CWE-209