Read the docs

Tad Uploader Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tad Uploader Project records in CISA KEV

No Tad Uploader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tad Uploader 2 records LOW

Records

2 records in Tad Uploader · all components

TI-2021-18304 CVE-2021-41567 · GHSA-4x95-x397-5chq

Tad Uploader - Stored XSS

Priority LOW 28

The new add subject parameter of Tad Uploader view book list function fails to filter special characters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00632 Published 2021-10-08 No fix listed CWE-79
TI-2021-18516 CVE-2021-41976 · GHSA-43g3-jf9m-f6f5

Tad Uploader - Improper Authorization

Priority LOW 26

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01032 Published 2021-10-08 No fix listed CWE-285
Open these records in search →