Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: AiDex 1.7 Clear all filters
TI-2025-03148 CVE-2025-3579 · GHSA-2ff5-6f9m-635q

Code Injection Vulnerability in AiDex

Priority MEDIUM 49

In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00665 Published 2025-04-15 Fixed in 1.7 CWE-94
TI-2025-03147 CVE-2025-3578 · GHSA-j2g7-67mh-m3hh

Adversarial Input Handling Vulnerability in AiDex

Priority MEDIUM 49

A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of users in production or development environme…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00504 Published 2025-04-15 Fixed in 1.7 CWE-1039