Vulnerabilities

TI-2024-22679 CVE-2024-34336 · GHSA-3qv6-5f5f-f89j

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to…

MEDIUM 63

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00383 Published 2024-09-12 No fix listed CWE-204

TI-2024-22678 CVE-2024-34335 · GHSA-c4q5-vjmp-xrgv

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site…

MEDIUM 60

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00306 Published 2024-09-12 No fix listed CWE-79

TI-2024-22677 CVE-2024-34334 · GHSA-mrr5-8hm7-42xh

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability…

HIGH 79

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00459 Published 2024-09-12 No fix listed CWE-89

Vulnerabilities

Filters

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to…

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site…

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability…