Vulnerabilities

TI-2020-10701 CVE-2020-13639 · GHSA-f22p-xx2m-5g9m

A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before…

LOW 29

A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00821 Published 2021-08-31 No fix listed CWE-79

TI-2021-10104 CVE-2021-29357 · GHSA-x4mr-7jcx-v2x6

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11…

LOW 39

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00989 Published 2021-04-12 No fix listed CWE-918

TI-2020-17678 CVE-2020-29441 · GHSA-3xv5-g593-pv7f

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0.

LOW 33

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00952 Published 2020-11-30 No fix listed CWE-434

TI-2019-09159 CVE-2019-12273 · GHSA-3j3h-76gf-gffm

OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content…

LOW 29

OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00465 Published 2019-12-31 No fix listed CWE-352

Vulnerabilities

Filters

A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before…

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11…

An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0.

OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content…