Vulnerabilities

TI-2024-32427 CVE-2024-48573 · GHSA-4f8q-56wq-r4gw

A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…

MEDIUM 51

A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and administrator account passwords via the "Reset password" feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01029 Published 2024-10-29 No fix listed CWE-89

TI-2024-32426 CVE-2024-48572 · GHSA-8798-5c83-39gj

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…

LOW 30

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00441 Published 2024-10-29 No fix listed CWE-276

Vulnerabilities

Filters

A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…