Simiki Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Simiki Project records in CISA KEV

No Simiki Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simiki 2 records MEDIUM

Records

2 records in Simiki · all components

TI-2020-13509 CVE-2020-19001 · GHSA-w873-xcqq-x922

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute…

MEDIUM 49

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04325 Published 2021-08-27 Fixed in 1.6.2.2 CWE-77

TI-2020-13508 CVE-2020-19000 · GHSA-fqr5-qphf-vfr8

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to…

LOW 29

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01119 Published 2021-08-27 Fixed in 1.6.2.2 CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0