Vulnerabilities

TI-2021-04476 CVE-2021-21377 · GHSA-g4rf-pc26-6hmr

Open Redirect in OMERO.web

LOW 26

OMERO.web is open source Django-based software for managing microscopy imaging.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00826 Published 2021-03-23 Fixed in 5.9.0 CWE-601

TI-2021-04475 CVE-2021-21376 · GHSA-gfp2-w5jm-955q

LOW 32

OMERO.web is open source Django-based software for managing microscopy imaging.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01457 Published 2021-03-23 Fixed in 5.9.0 CWE-200

TI-2020-06414 CVE-2020-7932 · GHSA-vwxv-frj6-fhc9

LOW 27

OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00803 Published 2020-06-17 Fixed in 5.6.3 CWE-200