stefanprodan

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

stefanprodan records in CISA KEV

No stefanprodan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Podinfo 2 records MEDIUM

Records

2 records

TI-2025-43152 CVE-2025-70849 · GHSA-mw8w-q3f7-2v85

Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload…

MEDIUM 60

Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /store endpoint.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-02-03 Fixed in 1.8.1-0.20260314125853-83deb7fcb742 CWE-434

TI-2026-31746 CVE-2026-43644 · GHSA-q23m-vm9r-5745

podinfo 6.11.2 Reflected XSS via /echo Endpoint

MEDIUM 56

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Cont…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00195 Published 2026-05-14 Fixed in 1.8.1-0.20260519111337-cbebb20fd485 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0