Read the docs

Uni

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Uni records in CISA KEV

No Uni vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Unifi Os · all components

TI-2023-12908 CVE-2023-28361 · GHSA-g562-q5g5-pfpw

Cross-site request forgery in UniFi OS

Priority LOW 29

A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affe…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00295 Published 2023-05-11 No fix listed CWE-352
Open these records in search →