TI-2023-26007 CVE-2023-48029 · GHSA-674m-h5xx-v6gp
Corebos 8.0 and below is vulnerable to CSV Injection.
Priority HIGH 70
Corebos 8.0 and below is vulnerable to CSV Injection.
Vulnerabilities
9 records
TI-2023-02881 CVE-2023-3075 · GHSA-3362-hf4h-mq66
Cross-Site Request Forgery (CSRF) in tsolucio/corebos
Priority LOW 29
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
TI-2023-02880 CVE-2023-3074 · GHSA-p9vj-c5qh-4c5j
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 64
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
TI-2023-02879 CVE-2023-3073 · GHSA-fmwg-q6rr-267q
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
TI-2023-02876 CVE-2023-3070 · GHSA-gxfx-w4rg-8764
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
TI-2023-02875 CVE-2023-3069 · GHSA-gfxr-mvph-45qr
Unverified Password Change in tsolucio/corebos
Priority MEDIUM 43
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
TI-2023-01441 CVE-2023-1527 · GHSA-5rvj-4rxp-67hv
Cross-site Scripting (XSS) - Generic in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
TI-2022-04063 CVE-2022-4446 · GHSA-7xcv-hwp5-79fx
PHP Remote File Inclusion in tsolucio/corebos
Priority HIGH 75
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
TI-2018-15943 CVE-2018-1000547 · GHSA-fqrq-8c5q-mpcp
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in…
Priority LOW 26
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to.