Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Sismics records in CISA KEVNo Sismics vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00793 · Published 2025-01-29 · No fix listed CWE-90
Priority HIGH 73
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00267 · Published 2025-01-29 · No fix listed CWE-352
Priority HIGH 72
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
CVSS 3.1HIGH 8.4· Network · High privileges · User interaction · EPSS 0.02826 · Published 2024-10-07 · No fix listed CWE-79
Priority HIGH 68
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00288 · Published 2025-01-13 · No fix listed CWE-352
Priority MEDIUM 59
Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00445 · Published 2023-09-25 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was determined in Sismics Teedy up to 1.11.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00479 · Published 2025-10-16 · No fix listed CWE-266
Priority MEDIUM 44
In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS).
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01339 · Published 2022-01-10 · No fix listed CWE-79
Priority MEDIUM 41
In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.01068 · Published 2022-01-10 · No fix listed CWE-79
THREATIST.IORead the docs