Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
tsolucio records in CISA KEVNo tsolucio vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 75
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01352 · Published 2022-12-13 · Fixed in 8.0 CWE-98
Priority MEDIUM 64
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00506 · Published 2023-06-02 · Fixed in 8 CWE-79
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00467 · Published 2023-06-02 · Fixed in 8 CWE-79
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00517 · Published 2023-06-02 · Fixed in 8 CWE-79
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00569 · Published 2023-06-02 · Fixed in 8 CWE-79
Priority MEDIUM 58
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00536 · Published 2023-03-21 · Fixed in 8.0 CWE-79
Priority MEDIUM 43
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00597 · Published 2023-06-02 · Fixed in 8 CWE-620
Priority LOW 29
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00316 · Published 2023-06-02 · Fixed in 8 CWE-352
Open these records in search →