Read the docs

steedos

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

steedos records in CISA KEV

No steedos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Steedos 1 record MEDIUM

Records

1 record in Steedos · all components

TI-2020-18141 CVE-2020-35666 · GHSA-q7pj-xc3r-rm4w

Steedos Platform through 1.21.24 allows NoSQL injection because the…

Priority MEDIUM 40

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by MongoDB operator attacks su…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01086 Published 2020-12-23 No fix listed CWE-89
Open these records in search →