Projectforge

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Projectforge records in CISA KEV

No Projectforge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Projectforge 3 records LOW

Records

3 records in Projectforge · all components

TI-2013-05920 CVE-2013-7251 · GHSA-43h7-vvrf-6gmp

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/d…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01103 Published 2014-01-02 No fix listed CWE-352

TI-2013-05919 CVE-2013-7250 · GHSA-46r4-fm53-62xh

Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in…

LOW 20

Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01475 Published 2014-01-02 No fix listed CWE-79

TI-2011-04542 CVE-2011-5269 · GHSA-hf47-ffvj-wm45

Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote…

LOW 19

Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a validation message.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01068 Published 2014-01-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	2
No CVSS	0