Vulnerabilities

TI-2022-22584 CVE-2022-45760 · GHSA-3c8c-vcmc-g2h3

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

MEDIUM 41

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00596 Published 2022-12-12 No fix listed CWE-863

TI-2022-22583 CVE-2022-45759 · GHSA-wp5g-24xx-jcg4

MEDIUM 41

SENS v1.0 has a file upload vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00634 Published 2022-12-12 No fix listed CWE-434

TI-2022-22582 CVE-2022-45758 · GHSA-jv2g-hj6c-v276

LOW 24

SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0036 Published 2022-12-12 No fix listed CWE-79

TI-2022-22581 CVE-2022-45756 · GHSA-9mgg-3gj3-77pg

LOW 27

SENS v1.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2022-12-12 No fix listed CWE-79