Vulnerabilities

TI-2025-34546 CVE-2025-54791 · GHSA-gpmg-4x4g-mr5r

OMERO.web displays unecessary user information when requesting to reset the password

LOW 30

OMERO.web provides a web based client and plugin infrastructure.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00277 Published 2025-08-13 Fixed in 5.29.2 CWE-209

TI-2024-23254 CVE-2024-35180 · GHSA-vr85-5pwx-c6gq

LOW 27

OMERO.web provides a web based client and plugin infrastructure.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2024-05-21 Fixed in 5.26.0 CWE-830

TI-2021-17971 CVE-2021-41132 · GHSA-g67g-hvc3-xmvf

MEDIUM 44

OMERO.web provides a web based client and plugin infrastructure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01039 Published 2021-10-14 Fixed in 5.11.0, 4.4.1 CWE-116