Vulnerabilities

TI-2024-26872 CVE-2024-40111

A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in…

MEDIUM 55

A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00833 Published 2024-08-23 No fix listed CWE-79

TI-2024-26904 CVE-2024-40400 · GHSA-47mc-qmh2-mqj4

HIGH 73

An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00812 Published 2024-07-19 Fixed in 2.0.0-alpha.5 CWE-434

TI-2023-06434 CVE-2023-7038 · GHSA-4j8w-p6hv-3qxc

LOW 29

A vulnerability was found in automad up to 1.10.9.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0039 Published 2023-12-21 Fixed in 2.0.0-alpha.1 CWE-352

TI-2023-06433 CVE-2023-7037 · GHSA-q5q3-qm26-9jwm

LOW 39

A vulnerability was found in automad up to 1.10.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00708 Published 2023-12-21 No fix listed CWE-918

TI-2023-06432 CVE-2023-7036

LOW 25

A vulnerability was found in automad up to 1.10.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00579 Published 2023-12-21 No fix listed CWE-434

TI-2023-06431 CVE-2023-7035

LOW 23

A vulnerability was found in automad up to 1.10.9 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0061 Published 2023-12-21 No fix listed CWE-79

TI-2021-15414 CVE-2021-37502 · GHSA-q3c8-65q7-9v78

MEDIUM 58

Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2023-02-03 Fixed in 1.8.0 CWE-79

TI-2022-01408 CVE-2022-1536 · GHSA-f6fj-c8gc-64v6

LOW 26

A vulnerability has been found in automad up to 1.10.9 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00665 Published 2022-04-29 No fix listed CWE-79