Vulnerabilities

TI-2018-09358 CVE-2018-13040 · GHSA-v2fg-xxhv-9ch6

OpenSID 18.06-pasca has a CSRF vulnerability.

LOW 39

OpenSID 18.06-pasca has a CSRF vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0064 Published 2018-07-01 No fix listed CWE-352

TI-2018-09357 CVE-2018-13039 · GHSA-hvrm-924x-c9hr

LOW 29

OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-07-01 No fix listed CWE-79

TI-2018-09356 CVE-2018-13038 · GHSA-94rc-fxwq-q3h5

MEDIUM 46

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2018-07-01 No fix listed CWE-434