Tripexpress Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tripexpress Project records in CISA KEV

No Tripexpress Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Tripexpress · all components

TI-2021-19524 CVE-2021-43691 · GHSA-42jq-8pvg-2649

MEDIUM 45

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01569 Published 2021-11-29 No fix listed CWE-22