TI-2023-14788 CVE-2023-31060 · GHSA-f4r6-mhq5-395w
Repetier Server through 1.4.10 executes as SYSTEM.
Priority HIGH 82
Repetier Server through 1.4.10 executes as SYSTEM.
Repetier-server
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Repetier-server records in CISA KEVNo Repetier-server vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-14789 CVE-2023-31061 · GHSA-2pm7-3m95-7x49
Repetier Server through 1.4.10 does not have CSRF protection.
Priority HIGH 73
Repetier Server through 1.4.10 does not have CSRF protection.
TI-2023-14787 CVE-2023-31059 · GHSA-vqjx-gc4r-4cxp
Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that…
Priority HIGH 72
Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.
TI-2019-10772 CVE-2019-14450 · GHSA-p63w-mxmx-g58f
A directory traversal vulnerability was discovered in RepetierServer.exe in…
Priority MEDIUM 55
A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location.
TI-2019-10773 CVE-2019-14451 · GHSA-rhq4-59ww-jw9j
RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML…
Priority MEDIUM 49
RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration.