Yunohost

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yunohost records in CISA KEV

No Yunohost vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Yunohost · all components

TI-2018-08090 CVE-2018-11347 · GHSA-g2pg-xwqc-r429

MEDIUM 41

The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01324 Published 2018-12-04 No fix listed CWE-113

TI-2018-08091 CVE-2018-11348 · GHSA-27c7-2m8c-v368

LOW 25

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2018-12-04 No fix listed CWE-79