Vulnerabilities

TI-2020-15134 CVE-2020-24667 · GHSA-28q6-f58p-4jf2

Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection…

MEDIUM 40

Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2021-06-10 No fix listed CWE-89

TI-2020-15138 CVE-2020-24671 · GHSA-fvfg-j5pp-h8xx

MEDIUM 40

Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2021-06-10 No fix listed CWE-89

TI-2020-15130 CVE-2020-24663 · GHSA-fmxr-r9xc-q869

LOW 25

Trace Financial CRESTBridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00491 Published 2021-06-10 No fix listed CWE-79