Vulnerabilities

TI-2018-13278 CVE-2018-18762 · GHSA-qwxx-r7ph-8m3q

SaltOS 3.1 r8126 contains a database download vulnerability.

LOW 38

SaltOS 3.1 r8126 contains a database download vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.06189 Published 2019-03-17 No fix listed CWE-200

TI-2018-13279 CVE-2018-18763 · GHSA-jxf2-84cf-jfqp

MEDIUM 48

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2018-11-16 No fix listed CWE-89

TI-2018-13277 CVE-2018-18761 · GHSA-xwm8-c743-c377

MEDIUM 59

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16456 Published 2018-11-16 No fix listed CWE-89