Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Linecorp Component: Central Dogma Clear all filters
TI-2025-10279 CVE-2025-11222 · GHSA-4hr2-xf7w-jf76

Open redirect in LINE Corporation Central Dogma

Priority LOW 26

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00184 Published 2025-12-04 Fixed in 0.78.0 CWE-601
TI-2024-01060 CVE-2024-1143 · GHSA-34q3-p352-c7q8

Cross-site scripting in LINE Corporation Central Dogma

Priority MEDIUM 41

Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00491 Published 2024-02-02 Fixed in 0.64.1 CWE-79
TI-2021-15992 CVE-2021-38388 · GHSA-734h-jr82-88qh

Missing authorization in LINE Corporation Central Dogma

Priority MEDIUM 40

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0089 Published 2021-09-08 Fixed in 0.52.0 CWE-862