Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jan Syski MegaBIP — megabip.pl/index.php?id=24,145 Clear all filters
TI-2025-03442 CVE-2025-3895 · GHSA-f29p-fvxc-743q

Low token entropy in MegaBIP

Priority MEDIUM 48

Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0051 Published 2025-05-23 No fix listed CWE-334
TI-2025-03441 CVE-2025-3894 · GHSA-xqr2-347w-52hc

Stored XSS in MegaBIP

Priority LOW 22

Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00447 Published 2025-05-23 No fix listed CWE-79
TI-2025-03440 CVE-2025-3893 · GHSA-9vwh-vqcj-qvf3

SQL Injection in MegaBIP

Priority LOW 39

While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00408 Published 2025-05-23 No fix listed CWE-89