Read the docs

PlexTrac

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

PlexTrac records in CISA KEV

No PlexTrac vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Plextrac 11 records MEDIUM

Records

11 records in Plextrac · all components

TI-2024-10978 CVE-2024-11834 · GHSA-59fp-r79g-c22h

Arbitrary File Write via PTRAC Import

Priority MEDIUM 45

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.9 Network Low privileges No interaction EPSS 0.00504 Published 2024-12-13 Fixed in 2.8.1 CWE-22
TI-2024-10977 CVE-2024-11833 · GHSA-c7wh-r987-rqvj

Arbitrary Directory Write via Runbooks Artifact Upload

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.9 Network Low privileges No interaction EPSS 0.00504 Published 2024-12-13 Fixed in 2.8.1 CWE-22
TI-2024-11766 CVE-2024-12687 · GHSA-4fm6-v3v9-jp3f

Insecure YAML Deserialization

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00666 Published 2024-12-16 Fixed in 2.8.1 CWE-502
TI-2024-10982 CVE-2024-11838 · GHSA-mw8h-f5q9-mjrp

Local File Inclusion

Priority MEDIUM 40

External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00443 Published 2024-12-13 Fixed in 2.8.1 CWE-73
TI-2024-10981 CVE-2024-11837 · GHSA-hr7w-h544-36m8

N1QL Injection

Priority MEDIUM 40

Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00479 Published 2024-12-13 Fixed in 2.8.1 CWE-89
TI-2024-10983 CVE-2024-11839 · GHSA-w63c-298x-f557

Insecure Deserialization via Runbooks Imports

Priority LOW 39

Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00359 Published 2024-12-13 Fixed in 2.8.1 CWE-502
TI-2024-10980 CVE-2024-11836 · GHSA-86c3-pwhr-vg8x

Server-side request forgery in PlexTrac

Priority LOW 39

Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00283 Published 2024-12-13 Fixed in 2.8.1 CWE-918
TI-2024-10979 CVE-2024-11835 · GHSA-qgpw-3wcj-f37p

Denial of service in PlexTrac

Priority LOW 31

Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

CVSS 4.0HIGH 7.0 Network Low privileges User interaction EPSS 0.00395 Published 2024-12-13 Fixed in 2.8.1 CWE-400
Open these records in search →