TI-2023-05146 CVE-2023-5590 · GHSA-4phc-fq33-39gx
NULL Pointer Dereference in seleniumhq/selenium
Priority HIGH 72
NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
Selenium
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Selenium records in CISA KEVNo Selenium vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2020-14563 CVE-2020-23452 · GHSA-8f3m-wpg8-3jw6
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to…
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/console page.
TI-2022-10914 CVE-2022-28108 · GHSA-h2rr-m97p-6jq9
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types…
Priority MEDIUM 58
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
TI-2022-10915 CVE-2022-28109 · GHSA-r2fp-xp6r-99gj
Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is…
Priority MEDIUM 40
Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding.