Synel

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Synel records in CISA KEV

No Synel vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Eharmony · all components

TI-2022-07039 CVE-2022-22790 · GHSA-x2v2-qh6j-j5r3

LOW 35

SYNEL - eharmony Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01023 Published 2022-01-28 No fix listed CWE-22

TI-2022-17019 CVE-2022-36778 · GHSA-g3qr-2f35-f8xg

LOW 29

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1MEDIUM 6.5 Adjacent network Low privileges No interaction EPSS 0.00463 Published 2022-09-13 No fix listed CWE-79

TI-2022-07040 CVE-2022-22791 · GHSA-g84v-6fgf-jw3g

LOW 29

SYNEL - eharmony Authenticated Blind & Stored XSS.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00382 Published 2022-01-28 No fix listed CWE-79