Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: FreshTomato Component: Freshtomato Clear all filters
TI-2023-03706 CVE-2023-3991 · GHSA-g95v-666p-2m3x

OS command injection vulnerability in FreshTomato 2023.3

Priority MEDIUM 47

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02129 Published 2023-10-16 No fix listed CWE-78
TI-2022-20679 CVE-2022-42484 · GHSA-xpf6-m5rc-7966

OS command injection in FreshTomato

Priority HIGH 76

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06013 Published 2023-01-30 No fix listed CWE-78
TI-2022-18076 CVE-2022-38451 · GHSA-fx25-235q-5cgx

Path traversal in FreshTomato

Priority LOW 37

A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02124 Published 2023-01-30 No fix listed CWE-22
TI-2022-11309 CVE-2022-28665 · GHSA-mxph-pm8g-2q9m

Out-of-bounds write in FreshTomato

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01343 Published 2022-08-05 No fix listed CWE-787
TI-2022-11308 CVE-2022-28664 · GHSA-whjh-pf6x-5rxq

Out-of-bounds write in FreshTomato

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01528 Published 2022-08-05 No fix listed CWE-787