Yf-exam Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Yf-exam Project records in CISA KEV

No Yf-exam Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-11772 CVE-2023-26780 · GHSA-x85m-2f5v-r7wr

HIGH 82

CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2023-03-02 No fix listed CWE-89

TI-2023-11771 CVE-2023-26779 · GHSA-945w-m377-8wgf

HIGH 82

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01426 Published 2023-03-03 No fix listed CWE-502

TI-2023-10734 CVE-2023-25402 · GHSA-78cg-rc3q-pv8q

HIGH 72

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00589 Published 2023-03-03 No fix listed CWE-434

TI-2023-10735 CVE-2023-25403 · GHSA-vc6m-w3jh-f5fx

HIGH 66

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00652 Published 2023-03-03 No fix listed CWE-639