Vulnerabilities

TI-2024-18827 CVE-2024-28294 · GHSA-ww39-r94v-qc83

Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.

MEDIUM 62

Limbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00595 Published 2024-04-29 No fix listed CWE-89

TI-2024-01661 CVE-2024-1784 · GHSA-3mjc-3jvj-6m9f

MEDIUM 64

A vulnerability classified as problematic was found in Limbas 5.2.14.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00686 Published 2024-02-23 No fix listed CWE-89

TI-2022-11183 CVE-2022-28454 · GHSA-75cq-8x6m-q547

LOW 30

Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01147 Published 2022-04-28 No fix listed CWE-79