Vulnerabilities

TI-2023-11771 CVE-2023-26779 · GHSA-945w-m377-8wgf

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

HIGH 82

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01426 Published 2023-03-03 No fix listed CWE-502

TI-2023-10735 CVE-2023-25403 · GHSA-vc6m-w3jh-f5fx

HIGH 66

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00652 Published 2023-03-03 No fix listed CWE-639

TI-2023-10734 CVE-2023-25402 · GHSA-78cg-rc3q-pv8q

HIGH 72

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00589 Published 2023-03-03 No fix listed CWE-434

TI-2023-11772 CVE-2023-26780 · GHSA-x85m-2f5v-r7wr

HIGH 82

CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2023-03-02 No fix listed CWE-89