Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Toni Mueller Component: Roundup Clear all filters
TI-2009-02611 CVE-2009-2737 · GHSA-9rj9-5wcv-xgf2

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through…

Priority LOW 29

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create pr…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02341 Published 2009-08-11 Fixed in 1.2.1, 1.4.7 CWE-264