Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Mecodia Component: Feripro Clear all filters
TI-2024-27663 CVE-2024-41519 · GHSA-g5wr-xh7j-3w9v

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via…

Priority LOW 25

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00375 Published 2024-08-02 No fix listed CWE-79
TI-2024-27662 CVE-2024-41518 · GHSA-7pp9-59r6-x3f6

An Incorrect Access Control vulnerability in…

Priority MEDIUM 40

An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0065 Published 2024-08-02 No fix listed CWE-284
TI-2024-27661 CVE-2024-41517 · GHSA-p64m-r26f-95x6

An Incorrect Access Control vulnerability in…

Priority LOW 31

An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding privileges.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00573 Published 2024-08-02 No fix listed