Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: National Keep Cyber Security Services CyberMath v1.5 Clear all filters
TI-2023-06106 CVE-2023-6676 · GHSA-w57g-4hpj-6p36

Cross Site Request Forgery in National Keep's CyberMath

Priority MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0029 Published 2024-02-02 Fixed in v1.5 CWE-352
TI-2023-06105 CVE-2023-6675 · GHSA-42fh-xcj5-fxwg

Malicious File Upload in National Keep's CyberMath

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2024-02-02 Fixed in v1.5 CWE-434
TI-2023-06104 CVE-2023-6673 · GHSA-q45w-f72f-v464

Reflected XSS in National Keep's CyberMath

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-02-02 Fixed in v1.5 CWE-79
TI-2023-06103 CVE-2023-6672 · GHSA-439f-fqrh-gmv2

Stored XSS in National Keep's CyberMath

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00292 Published 2024-02-02 Fixed in v1.5 CWE-79