Puzzle

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Puzzle records in CISA KEV

No Puzzle vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-11320 CVE-2023-26093 · GHSA-x7fw-xf29-5crf

MEDIUM 50

Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-02-20 No fix listed CWE-89

TI-2023-11319 CVE-2023-26092 · GHSA-mg3j-f44j-f628

MEDIUM 50

Liima before 1.17.28 allows server-side template injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-02-20 No fix listed CWE-917