Vulnerabilities

TI-2025-21651 CVE-2025-30345 · GHSA-fw4x-j9wf-qmp2

Improper output encoding in Intevation OpenSlides

MEDIUM 52

An issue was discovered in OpenSlides before 4.2.5.

CVSS 3.1MEDIUM 4.1 Network Low privileges User interaction EPSS 0.00288 Published 2025-03-21 Fixed in 4.2.5 CWE-116

TI-2025-21650 CVE-2025-30344 · GHSA-jvfr-jf2p-rc53

MEDIUM 63

An issue was discovered in OpenSlides before 4.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00322 Published 2025-03-21 Fixed in 4.2.5 CWE-208

TI-2025-21649 CVE-2025-30343 · GHSA-mwpv-367w-4cpc

MEDIUM 62

A directory traversal issue was discovered in OpenSlides before 4.2.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00483 Published 2025-03-21 Fixed in 4.2.5 CWE-24

TI-2025-21648 CVE-2025-30342 · GHSA-6h9q-x65f-g9gv

MEDIUM 60

An XSS issue was discovered in OpenSlides before 4.2.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2025-03-21 Fixed in 4.2.5 CWE-79