Read the docs

Talkyard

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Talkyard records in CISA KEV

No Talkyard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Talkyard 2 records HIGH

Records

2 records in Talkyard · all components

TI-2021-07986 CVE-2021-25980 · GHSA-j8p2-hh7r-9r58

Talkyard - Host-Header Injection Leads to Account Takeover

Priority HIGH 73

In Talkyard, versions v0.04.01 through v0.6.74-WIP-63220cb, v0.2020.22-WIP-b2e97fe0e through v0.2021.02-WIP-879ef3fe1 and tyse-v0.2021.02-879ef3fe1-regular through tyse-v0.2021.28-af66b6905-regular, are vulnerable to Hos…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01251 Published 2021-11-11 No fix listed CWE-74
TI-2021-07987 CVE-2021-25981 · GHSA-4jw2-24wg-vcf7

Talkyard - Insufficient Session Expiration

Priority MEDIUM 47

In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02545 Published 2022-01-03 No fix listed CWE-613
Open these records in search →