Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SysAid Component: Sysaid On-premises Clear all filters
TI-2023-15525 CVE-2023-32226 · GHSA-mp6j-qh5h-ccj4

Sysaid - CWE-552: Files or Directories Accessible to External Parties

Priority LOW 37

Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an unspecified method.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00535 Published 2023-07-30 Fixed in 23.2.14 b18 CWE-552
TI-2023-15524 CVE-2023-32225 · GHSA-64w5-mph3-q7qw

Unrestricted file upload in Sysaid

Priority MEDIUM 43

Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00649 Published 2023-07-30 Fixed in 23.2.14 b18 CWE-434