Vulnerabilities

TI-2025-39303 CVE-2025-63414 · GHSA-8259-wq47-7hr3

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an…

HIGH 82

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01846 Published 2025-12-16 No fix listed CWE-22

TI-2025-40401 CVE-2025-65573 · GHSA-88wg-48f3-4qgx

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_status.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00332 Published 2025-12-09 No fix listed CWE-352

TI-2025-40400 CVE-2025-65572 · GHSA-8gcw-g9gc-6j5r

Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows…

LOW 28

Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to execute arbitrary code via the (1) config, (2) filename, or (3) extratext parameter to allskySettings.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2025-12-09 No fix listed CWE-79

Vulnerabilities

Filters

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an…

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06…

Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows…