Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Clibo Manager Clear all filters
TI-2024-09682 CVE-2024-10454 · GHSA-mxvr-rwhq-rpw8

Clickjacking in Clibo Manager

Priority LOW 27

Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0024 Published 2024-10-31 No fix listed CWE-1021
TI-2024-08535 CVE-2024-9199 · GHSA-w36c-m53m-r93m

Rate limit vulnerability in Clibo Manager

Priority LOW 39

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2024-09-26 No fix listed CWE-799
TI-2024-08534 CVE-2024-9198 · GHSA-7669-g6x3-vc23

Stored Cross-Site Scripting vulnerability in Clibo Manager

Priority LOW 33

Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored XSS ) by uploading a malicious .svg image in the section: Profile > Profile picture.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00257 Published 2024-09-26 No fix listed CWE-79