Vulnerabilities

TI-2025-32290 CVE-2025-50986 · GHSA-9697-ch68-p5qx

diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting…

MEDIUM 58

diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.0024 Published 2025-08-27 No fix listed CWE-79

TI-2025-32289 CVE-2025-50985 · GHSA-cvxr-h9rr-hmf7

diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site…

MEDIUM 58

diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.0024 Published 2025-08-27 No fix listed CWE-79

TI-2025-32288 CVE-2025-50984 · GHSA-vg7c-6p59-43f2

diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL…

MEDIUM 57

diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2025-08-27 No fix listed CWE-89

Vulnerabilities

Filters

diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting…

diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site…

diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL…