Vulnerabilities

TI-2024-08624 CVE-2024-9291 · GHSA-qfqv-x56x-5p3g

kalvinGit kvf-admin XML File cross site scripting

MEDIUM 57

A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00388 Published 2024-09-27 No fix listed CWE-79

TI-2024-08614 CVE-2024-9280 · GHSA-whmv-pp49-rwhh

MEDIUM 56

A vulnerability has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00576 Published 2024-09-27 No fix listed CWE-434

TI-2022-16291 CVE-2022-35857 · GHSA-h775-wq88-p3f2

MEDIUM 46

kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01778 Published 2022-07-13 No fix listed CWE-798