TI-2020-05477 CVE-2020-6752 · GHSA-jw2j-g2xh-cfcm
In OMERO before 5.6.1, group owners can access members' data in other groups.
Priority LOW 19
In OMERO before 5.6.1, group owners can access members' data in other groups.
Vulnerabilities
7 records
TI-2019-12227 CVE-2019-16245 · GHSA-xxgh-v288-pqmx
OMERO before 5.6.1 makes the details of each user available to all users.
Priority LOW 26
OMERO before 5.6.1 makes the details of each user available to all users.
TI-2014-05998 CVE-2014-7198 · GHSA-h6v5-2cr2-vhc3
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's…
Priority LOW 39
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
TI-2018-15989 CVE-2018-1000635 · GHSA-p4pg-9hcc-p5mf
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a…
Priority LOW 30
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to ser…
TI-2018-15988 CVE-2018-1000634 · GHSA-2wmg-hcwc-fx57
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper…
Priority LOW 34
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a…
TI-2018-15987 CVE-2018-1000633 · GHSA-vw9q-9wcc-rxmc
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information…
Priority LOW 34
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being reveal…
TI-2017-14655 CVE-2017-1000438 · GHSA-43w2-8m93-rppj
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such…
Priority LOW 38
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.