Vendors / pwndoc Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now pwndoc records in CISA KEV No pwndoc vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01936 · Published 2022-12-05 · No fix listed CWE-434
Priority HIGH 70
PwnDoc is a penetration test report generator.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2025-01-20 · Fixed in 14acb704891245bf1703ce6296d62112e85aa995 CWE-352
Priority HIGH 70
PwnDoc is a penetration test report generator.
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00692 · Published 2024-12-10 · Fixed in 1d4219c596f4f518798492e48386a20c6e9a2fe6 CWE-22
Priority MEDIUM 64
PwnDoc is a penetration test reporting application.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01179 · Published 2025-02-28 · Fixed in 1.2.0 CWE-22
Priority MEDIUM 64
PwnDoc is a penetration test reporting application.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.02111 · Published 2025-02-28 · Fixed in 1.2.0 CWE-22
Priority MEDIUM 64
PenDoc is a penetration testing reporting application.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00672 · Published 2024-12-11 · Fixed in 1d4219c596f4f518798492e48386a20c6e9a2fe6 CWE-1336
Priority MEDIUM 63
PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.009 · Published 2022-10-29 · No fix listed CWE-307
Priority MEDIUM 63
PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.009 · Published 2022-10-29 · No fix listed CWE-307
Priority MEDIUM 62
PwnDoc is a penetration test report generator.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00619 · Published 2024-12-10 · No fix listed CWE-20
Priority MEDIUM 43
PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02653 · Published 2021-07-19 · No fix listed
Open these records in search → All records by CVSS severity
0 4 6 0 0
THREATIST.IORead the docs