Read the docs

Pisignage

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pisignage records in CISA KEV

No Pisignage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pisignage 1 record LOW

Records

1 record in Pisignage · all components

TI-2019-14596 CVE-2019-20354 · GHSA-2j3r-j4h7-v6hh

The web application component of piSignage before 2.6.4 allows a remote attacker…

Priority LOW 31

The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user) to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0879 Published 2020-01-06 No fix listed CWE-22
Open these records in search →