Scratch-wiki

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Scratch-wiki records in CISA KEV

No Scratch-wiki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scratch Login 2 records MEDIUM Scratch Confirmaccount V3 1 record LOW Scratchsig 1 record MEDIUM

Records

1 record in Scratch Confirmaccount V3 · all components

TI-2021-21135 CVE-2021-46252 · GHSA-xjc2-47vq-w6wg

A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki…

LOW 29

A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00484 Published 2022-02-15 No fix listed CWE-352

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0