Read the docs

Shipwire Api Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Shipwire Api Project records in CISA KEV

No Shipwire Api Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 26

The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview (admin/shipwire/shipments), which allows remote attackers to obtain sensitive information via a req…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01396 Published 2015-08-18 No fix listed CWE-264
Open these records in search →