Vulnerabilities

TI-2025-13102 CVE-2025-14341 · GHSA-9439-7mjc-q3p7

Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive

LOW 35

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00221 Published 2026-05-07 Fixed in 4.8.3.2 CWE-770

TI-2026-05959 CVE-2026-6795 · GHSA-g28p-hp32-cg73

Open Redirect in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 42

URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00233 Published 2026-05-07 Fixed in 4.8.3.2 CWE-601

TI-2026-05065 CVE-2026-5784 · GHSA-wj3v-9w9x-ccw9

Stored XSS in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 40

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00327 Published 2026-05-07 Fixed in 4.8.3.2 CWE-79

TI-2026-05265 CVE-2026-6002 · GHSA-pmh8-hhp9-qxxf

HTML Injection in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 40

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00327 Published 2026-05-07 Fixed in 4.8.3.2 CWE-80

TI-2026-05072 CVE-2026-5791 · GHSA-r92j-v37g-pjf9

CSRF in DivvyDrive Information Technologies' DivvyDrive

LOW 30

Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0015 Published 2026-05-07 Fixed in 4.8.3.2 CWE-352