ServiceStack

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ServiceStack records in CISA KEV

No ServiceStack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Servicestack 4 records HIGH

Records

4 records

TI-2025-05846 CVE-2025-6445 · GHSA-5r4f-7fg6-r3hw

Path traversal in ServiceStack

HIGH 70

ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01139 Published 2025-06-25 No fix listed CWE-22

TI-2020-17068 CVE-2020-28042 · GHSA-v5rv-hpxg-8x49

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has…

LOW 29

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02344 Published 2020-11-01 Fixed in 5.9.2 CWE-347

TI-2019-16015 CVE-2019-1010199 · GHSA-vcfc-9wcp-j623

Cross-site scripting in ServiceStack Framework

LOW 29

ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00889 Published 2019-07-23 Fixed in 5.2.0 CWE-79

TI-2025-05845 CVE-2025-6444 · GHSA-2cp7-3mjq-769q

Improper input validation in ServiceStack

LOW 27

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00492 Published 2025-06-25 No fix listed CWE-20

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0