TI-2025-10868 CVE-2025-11853 · GHSA-88w4-m7cv-7472
Sismics Teedy API Endpoint file access control
Priority MEDIUM 57
A vulnerability was determined in Sismics Teedy up to 1.11.
Vulnerabilities
8 records
TI-2024-36691 CVE-2024-54852 · GHSA-pm9m-75p4-7h69
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username…
Priority HIGH 82
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection.
TI-2024-36690 CVE-2024-54851 · GHSA-7xmr-c34w-p9w7
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
Priority HIGH 73
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
TI-2025-16804 CVE-2025-22963 · GHSA-vm4r-hh6w-jv9x
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
Priority HIGH 68
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
TI-2024-30918 CVE-2024-46278 · GHSA-qw9m-35wc-m4gj
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
Priority HIGH 72
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
TI-2023-04504 CVE-2023-4892 · GHSA-3fm6-w3v5-p4r7
Teedy v1.11 - Stored cross-site scripting (XSS)
Priority MEDIUM 59
Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate.
TI-2022-06462 CVE-2022-22115 · GHSA-g6p4-282g-vmm2
Teedy - Stored Cross-Site Scripting (XSS) in Tag Name
Priority MEDIUM 41
In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag.
TI-2022-06461 CVE-2022-22114 · GHSA-3228-87fw-vwj8
Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality
Priority MEDIUM 44
In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS).