TI-2023-22296 CVE-2023-41908 · GHSA-fm4p-m2rr-w83h
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Priority LOW 30
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Vulnerabilities
9 records
TI-2023-21960 CVE-2023-41363 · GHSA-69rq-g7gr-2r73
In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users…
Priority LOW 20
In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
TI-2023-13384 CVE-2023-28883 · GHSA-9wmw-wg92-52h9
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
Priority MEDIUM 50
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
TI-2023-11615 CVE-2023-26468 · GHSA-jf5q-85p7-vjm3
Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
Priority MEDIUM 42
Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
TI-2022-09013 CVE-2022-25321 · GHSA-48hf-57c2-8m4x
An issue was discovered in Cerebrate through 1.4.
Priority LOW 29
An issue was discovered in Cerebrate through 1.4.
TI-2022-09012 CVE-2022-25320 · GHSA-x8h5-p34r-x45c
An issue was discovered in Cerebrate through 1.4.
Priority LOW 26
An issue was discovered in Cerebrate through 1.4.
TI-2022-09011 CVE-2022-25319 · GHSA-mr2c-ph77-2532
An issue was discovered in Cerebrate through 1.4.
Priority LOW 33
An issue was discovered in Cerebrate through 1.4.
TI-2022-09010 CVE-2022-25318 · GHSA-w5qc-7g9r-478j
An issue was discovered in Cerebrate through 1.4.
Priority LOW 21
An issue was discovered in Cerebrate through 1.4.
TI-2022-09009 CVE-2022-25317 · GHSA-ff7h-w5rr-x7jc
An issue was discovered in Cerebrate through 1.4.
Priority LOW 28
An issue was discovered in Cerebrate through 1.4.