Raneto Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Raneto Project records in CISA KEV

No Raneto Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-15859 CVE-2022-35143 · GHSA-7942-2fx8-qhpf

MEDIUM 45

Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01706 Published 2022-08-04 Fixed in 0.17.1 CWE-521

TI-2022-15858 CVE-2022-35142 · GHSA-xxc2-j7jj-6g5m

LOW 36

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01592 Published 2022-08-04 Fixed in 0.17.1 CWE-287

TI-2022-15860 CVE-2022-35144 · GHSA-vc68-6x72-w22f

LOW 24

Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00937 Published 2022-08-04 Fixed in 0.17.1 CWE-79