Tree Kit Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tree Kit Project records in CISA KEV

No Tree Kit Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Tree Kit · all components

TI-2023-20165 CVE-2023-38894 · GHSA-5p42-m6f3-hpmj

HIGH 82

A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01689 Published 2023-08-16 Fixed in 0.7.5 CWE-1321

TI-2021-03136 CVE-2021-4278 · GHSA-mw4x-g2x8-qcvf

LOW 34

A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00447 Published 2022-12-25 Fixed in 0.7.0 CWE-1321