Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SmartStar Software Component: Cws Collaborative Development Platform Clear all filters
TI-2023-26235 CVE-2023-48376 · GHSA-4q3r-q67v-jf47

SmartStar Software CWS Web-Base - Arbitrary File Upload

Priority MEDIUM 44

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00961 Published 2023-12-15 No fix listed CWE-434
TI-2023-26234 CVE-2023-48375 · GHSA-3qwj-cx3m-c3pj

SmartStar Software CWS Web-Base - Broken Access Control

Priority LOW 39

SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00687 Published 2023-12-15 No fix listed CWE-862
TI-2023-26233 CVE-2023-48374 · GHSA-g7r5-hxwr-jj87

SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

Priority LOW 30

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00552 Published 2023-12-15 No fix listed CWE-798