Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 25

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary files in arbitrary file system paths via a crafted HTT…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00569 Published 2025-04-30 No fix listed CWE-23
Priority LOW 33

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's bro…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00416 Published 2025-04-30 No fix listed CWE-116