Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

TI-2020-07438 CVE-2020-9299 · GHSA-wgmg-xwg9-fhqf

Cross-site scripting in Netflix Dispatch

Priority LOW 25

There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0057 Published 2020-11-09 Fixed in v20201106 CWE-79
Priority LOW 31

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00943 Published 2020-11-09 Fixed in v20201106