Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: stitionai/devika - Clear all filters
TI-2024-05156 CVE-2024-5548 · GHSA-73cq-4mxr-2h5h

Directory Traversal in stitionai/devika

Priority HIGH 72

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01021 Published 2024-06-27 Fixed in - CWE-22
TI-2024-05155 CVE-2024-5547 · GHSA-g447-v446-74c4

Directory Traversal in stitionai/devika

Priority HIGH 72

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01 Published 2024-06-27 Fixed in - CWE-23
TI-2024-04953 CVE-2024-5334 · GHSA-p7qc-844f-652r

Local File Read in stitionai/devika

Priority HIGH 72

A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02073 Published 2024-06-27 Fixed in - CWE-73