Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Prolizyazilim Component: Student Affairs Information System Clear all filters
TI-2024-07659 CVE-2024-8262 · GHSA-wh75-9866-4mjr

Path Traversal in Proliz Software's OBS

Priority MEDIUM 43

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Proliz Software OBS allows Path Traversal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2025-03-03 Fixed in 24.0927 CWE-22
TI-2024-07658 CVE-2024-8261 · GHSA-8xjv-x6f3-c657

IDOR in Proliz Software's OBS

Priority MEDIUM 48

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2025-03-03 Fixed in 24.0927 CWE-639
TI-2023-01620 CVE-2023-1726 · GHSA-pp9w-rwmf-7jvx

XSS in Proliz OBS

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00337 Published 2023-04-07 Fixed in 23.04.01 CWE-79