Swetrix

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Swetrix records in CISA KEV

No Swetrix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Swetrix 1 record HIGH

Records

2 records

TI-2025-36878 CVE-2025-59304 · GHSA-6q94-xgm6-vjmf

A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a…

HIGH 82

A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03456 Published 2025-09-17 No fix listed CWE-22

TI-2026-74115 CVE-2026-110621 · GHSA-88cr-32hr-63rh

Missing authorization in Swetrix Cloud lets users hijack projects

MEDIUM 40

Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00523 Published 2026-10-14 Fixed in 5.1.0 CWE-862

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0