Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GBIF Integrated Publishing Toolkit 3.3.4 Clear all filters
TI-2026-50195 CVE-2026-71880 · GHSA-xf73-gxc6-65vv

Server-side template injection in Integrated Publishing Toolkit

Priority LOW 36

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.0048 Published 2026-08-18 Fixed in 3.3.4 CWE-1336
TI-2026-50194 CVE-2026-71879 · GHSA-25rh-cr4w-2wx6

Authentication bypass in Integrated Publishing Toolkit

Priority MEDIUM 43

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via a…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00858 Published 2026-08-18 Fixed in 3.3.4 CWE-288
TI-2026-50193 CVE-2026-71878 · GHSA-9cwq-xr29-c4rp

Authentication bypass in Integrated Publishing Toolkit

Priority MEDIUM 43

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00858 Published 2026-08-18 Fixed in 3.3.4 CWE-306