Yunohost

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yunohost records in CISA KEV

No Yunohost vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2018-08090 CVE-2018-11347 · GHSA-g2pg-xwqc-r429

MEDIUM 41

The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01324 Published 2018-12-04 No fix listed CWE-113

TI-2020-18840 CVE-2020-36647 · GHSA-wvq3-mfmm-c65c

LOW 26

A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.0071 Published 2023-01-08 No fix listed CWE-22

TI-2018-08091 CVE-2018-11348 · GHSA-27c7-2m8c-v368

LOW 25

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2018-12-04 No fix listed CWE-79