Read the docs

Posh Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Posh Project records in CISA KEV

No Posh Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Posh 4 records LOW

Records

4 records in Posh · all components

TI-2014-01752 CVE-2014-2213 · GHSA-9gvx-79rg-73x7

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1…

Priority LOW 30

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01443 Published 2019-11-22 No fix listed CWE-601
TI-2014-01753 CVE-2014-2214 · GHSA-pq6c-xmq3-56qm

Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo)…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) error parameter to /includes/plugins/m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00817 Published 2019-11-22 No fix listed CWE-79
TI-2014-01751 CVE-2014-2212 · GHSA-2vq9-q9w6-2hh6

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo)…

Priority LOW 25

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01251 Published 2014-04-01 No fix listed CWE-255
Open these records in search →