Vendors / Blesta Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Blesta records in CISA KEV No Blesta vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.
CVSS 3.1 HIGH 7.1· Adjacent network · Low privileges · No interaction · EPSS 0.00305 · Published 2024-02-28 · No fix listed CWE-22
Priority LOW 35
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2026-02-03 · Fixed in 5.13.3 CWE-502
Priority LOW 34
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00515 · Published 2026-02-03 · Fixed in 5.13.3 CWE-502
Priority LOW 28
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0042 · Published 2026-02-03 · Fixed in 5.13.3 CWE-79
Open these records in search → All records by CVSS severity
0 3 1 0 0
