Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: kujirahand Component: Konawiki Clear all filters
TI-2021-03947 CVE-2021-20721 · GHSA-8438-2753-v3v3

Unrestricted file upload in kujirahand KonaWiki2

Priority MEDIUM 45

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2021-05-20 Fixed in 2.2.4 CWE-434
TI-2021-03946 CVE-2021-20720 · GHSA-92mq-hq5f-7rrr

SQL injection in kujirahand KonaWiki2

Priority MEDIUM 45

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01317 Published 2021-05-20 Fixed in 2.2.4 CWE-89
TI-2020-04583 CVE-2020-5614 · GHSA-j8w5-rfgv-wq62

Path traversal in kujirahand KonaWiki

Priority LOW 28

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02212 Published 2020-07-29 No fix listed CWE-22
TI-2020-04582 CVE-2020-5613 · GHSA-hqq9-hv7p-jh7g

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01082 Published 2020-07-29 No fix listed CWE-79
TI-2020-04581 CVE-2020-5612 · GHSA-p38g-jh93-54hr

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2020-07-29 No fix listed CWE-79