Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Ptarmigan Project records in CISA KEVNo Ptarmigan Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01277 · Published 2020-12-30 · No fix listed CWE-295
