Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: puncsky Component: Touchbase.ai Clear all filters
TI-2020-16042 CVE-2020-26221 · GHSA-v5x4-jpcc-h4rv

Stored Cross Site Scripting in touchbase.ai

Priority LOW 36

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS).

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00619 Published 2020-11-11 Fixed in 2.0 CWE-79
TI-2020-16041 CVE-2020-26220

Information exposure in touchbase.ai

Priority LOW 18

toucbase.ai before version 2.0 leaks information by not stripping exif data from images.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00753 Published 2020-11-11 Fixed in 2.0 CWE-200
TI-2020-16040 CVE-2020-26219 · GHSA-gx8m-4376-pv8m

Open Redirect in touchbase.ai

Priority LOW 28

touchbase.ai before version 2.0 is vulnerable to Open Redirect.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00616 Published 2020-11-11 Fixed in 2.0 CWE-601
TI-2020-16039 CVE-2020-26218

HTML Injection in touchbase.ai

Priority LOW 39

touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.01936 Published 2020-11-11 Fixed in 2.0 CWE-79