Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
phoronix-test-suite records in CISA KEVNo phoronix-test-suite vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 60
A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00629 · Published 2023-01-17 · No fix listed CWE-79
Priority MEDIUM 40
phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00833 · Published 2022-01-13 · Fixed in 10.8 CWE-352
Priority LOW 39
phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00757 · Published 2022-01-13 · Fixed in 10.8 CWE-352
Priority LOW 30
Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01314 · Published 2022-02-13 · Fixed in 10.8.2 CWE-79
Priority LOW 27
phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01112 · Published 2022-01-10 · Fixed in 10.8.0 CWE-79
Priority LOW 22
phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0084 · Published 2022-01-16 · Fixed in 10.8.0 CWE-352
Open these records in search →