Trestle-auth Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Trestle-auth Project records in CISA KEV

No Trestle-auth Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Trestle-auth · all components

TI-2021-10148 CVE-2021-29435 · GHSA-h8hx-2c5r-32cf

LOW 36

trestle-auth is an authentication plugin for the Trestle admin framework.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00663 Published 2021-04-13 Fixed in 0.4.2 CWE-352