Read the docs

Tipask

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tipask records in CISA KEV

No Tipask vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tipask 1 record LOW

Records

1 record

TI-2021-18384 CVE-2021-41714 · GHSA-9v7f-rj28-9x3v

In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading…

Priority LOW 35

In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing i…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00673 Published 2022-05-23 No fix listed CWE-494
Open these records in search →