Vendors / Subconverter Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Subconverter Project records in CISA KEV No Subconverter Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.344 · Published 2022-05-19 · No fix listed CWE-434
Priority LOW 35
tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request targ…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01151 · Published 2020-12-20 · No fix listed
Open these records in search → All records by CVSS severity
1 1 0 0 0
