Vendors / Xunfeng Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Xunfeng Project records in CISA KEV No Xunfeng Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.
CVSS 3.0 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00815 · Published 2018-09-12 · No fix listed CWE-352
Priority LOW 30
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host…
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00562 · Published 2018-09-11 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 1 1 0 0
