Vulnerabilities

TI-2021-20197 CVE-2021-44665 · GHSA-6h3x-v824-m53p

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when…

LOW 39

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.07685 Published 2022-02-24 No fix listed CWE-22

TI-2021-20196 CVE-2021-44664 · GHSA-25cf-hcwq-2gc7

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in…

MEDIUM 52

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a lang…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12782 Published 2022-02-24 No fix listed CWE-22

Vulnerabilities

Filters

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when…

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in…