Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Agora Foundation Clear all filters
TI-2025-34819 CVE-2025-55135 · GHSA-jcj4-g9w3-h34q

Unrestricted file upload in Agora

Priority LOW 28

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00294 Published 2025-08-07 Fixed CWE-434
TI-2025-34817 CVE-2025-55133 · GHSA-g5fq-77pp-34rr

Cross-site scripting in Agora

Priority LOW 28

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00284 Published 2025-08-07 Fixed CWE-79