Vulnerabilities

TI-2022-03670 CVE-2022-4001 · GHSA-hh2c-m2f3-3q9f

An authentication bypass vulnerability could allow an attacker to access API functions without authentication.

LOW 38

An authentication bypass vulnerability could allow an attacker to access API functions without authentication.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00342 Published 2024-07-31 Fixed in 1.5.0.16 CWE-287

TI-2022-03671 CVE-2022-4002 · GHSA-qjh8-9wf4-5229

LOW 35

A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00954 Published 2024-07-31 Fixed in 1.5.0.16 CWE-287

TI-2022-03672 CVE-2022-4003 · GHSA-jr9f-6cwx-mfjg

LOW 29

A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00396 Published 2024-07-31 Fixed in 1.5.0.16 CWE-400