Vulnerabilities

TI-2026-18301 CVE-2026-22783

Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management

MEDIUM 41

Iris is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00355 Published 2026-01-12 Fixed in 2.4.24 CWE-434

TI-2024-16852 CVE-2024-25624

LOW 34

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00852 Published 2024-04-25 Fixed in 2.4.6 CWE-1336

TI-2024-16868 CVE-2024-25640

LOW 24

Iris is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00337 Published 2024-02-19 Fixed in 2.4.0 CWE-87

TI-2023-27658 CVE-2023-50712

LOW 24

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00298 Published 2023-12-22 Fixed in 2.3.7 CWE-79

TI-2023-14431 CVE-2023-30615

LOW 28

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00382 Published 2023-05-25 Fixed in 2.2.1 CWE-80