Remark42

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Remark42 records in CISA KEV

No Remark42 vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Remark42 · all components

TI-2023-24674 CVE-2023-45966 · GHSA-r7w5-7g5j-xmxj

MEDIUM 40

umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00714 Published 2023-10-23 No fix listed CWE-918

TI-2021-10077 CVE-2021-29271

LOW 29

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2021-03-27 No fix listed CWE-79