Vulnerabilities

TI-2023-04169 CVE-2023-4517 · GHSA-7w44-2mwh-vhjr

Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2023-10-13 Fixed in 1.8.6 CWE-79

TI-2023-04678 CVE-2023-5084 · GHSA-g8c4-rhfw-rcpw

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-09-20 Fixed in 1.8.8 CWE-79

TI-2021-10649 CVE-2021-30070 · GHSA-7qw8-c2p4-4gxq

LOW 34

An issue was discovered in HestiaCP before v1.3.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00788 Published 2022-08-18 No fix listed