Sentrifugo

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Sentrifugo records in CISA KEV

No Sentrifugo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Sentrifugo · all components

TI-2019-11880 CVE-2019-15813 · GHSA-pqx5-mp9c-hm3r

MEDIUM 63

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.33236 Published 2019-09-04 No fix listed CWE-434

TI-2019-11881 CVE-2019-15814 · GHSA-6gvm-c4cj-xqv2

LOW 28

Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01581 Published 2019-09-04 No fix listed CWE-79