Read the docs

Save-server Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Save-server Project records in CISA KEV

No Save-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2020-11908 CVE-2020-15135 · GHSA-wwrj-35w6-77ff

CSRF vulnerability in save-server

Priority LOW 34

save-server (npm package) before version 1.05 is affected by a CSRF vulnerability, as there is no CSRF mitigation (Tokens etc.).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00722 Published 2020-08-04 Fixed in 1.0.5, 1.0.7 CWE-352
Open these records in search →