Vulnerabilities

TI-2023-24966 CVE-2023-46376 · GHSA-6pvg-63w9-jhx6

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

HIGH 72

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2023-10-27 No fix listed CWE-312

TI-2023-24965 CVE-2023-46375 · GHSA-3pmr-9m67-9h7q

HIGH 73

ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00333 Published 2023-10-27 No fix listed CWE-352

TI-2023-25032 CVE-2023-46491 · GHSA-xpmf-rjrc-7rc4

MEDIUM 60

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79

TI-2023-24964 CVE-2023-46374 · GHSA-7j46-2fmc-fw7w

MEDIUM 60

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00423 Published 2023-10-26 No fix listed CWE-79