Vulnerabilities

TI-2023-00322 CVE-2023-0338 · GHSA-55rv-pc53-r9qq

Cross-site Scripting (XSS) - Reflected in lirantal/daloradius

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00482 Published 2023-01-17 Fixed in master-branch CWE-79

TI-2023-00321 CVE-2023-0337 · GHSA-2m7g-9m2h-fmjg

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00482 Published 2023-01-17 Fixed in master-branch CWE-79

TI-2023-00044 CVE-2023-0048 · GHSA-j489-chr2-q5vp

HIGH 73

Code Injection in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30143 Published 2023-01-04 Fixed in master-branch CWE-94

TI-2023-00043 CVE-2023-0046 · GHSA-9rw8-hqcq-vxh4

HIGH 65

Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01086 Published 2023-01-04 Fixed in master-branch CWE-641

TI-2022-04231 CVE-2022-4630 · GHSA-xj56-q6pv-vrx6

MEDIUM 57

Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00672 Published 2022-12-21 Fixed in master CWE-1004

TI-2022-03999 CVE-2022-4366 · GHSA-4gv4-7phc-2jw7

HIGH 66

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00748 Published 2022-12-08 Fixed in master branch CWE-862

TI-2022-07535 CVE-2022-23475

HIGH 73

daloRADIUS is an open source RADIUS web management application.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2022-12-06 No fix listed CWE-352