Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: daifukuya.com Clear all filters
TI-2021-03913 CVE-2021-20687 · GHSA-jch2-6x9c-524j

Cross-site request forgery in daifukuya.com Kagemai

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00578 Published 2021-04-07 No fix listed CWE-352
TI-2021-03912 CVE-2021-20686 · GHSA-p4f7-mw34-f75x

Cross-site scripting in daifukuya.com Kagemai

Priority LOW 29

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00783 Published 2021-04-07 No fix listed CWE-79
TI-2021-03911 CVE-2021-20685 · GHSA-58j5-xm6m-86jh

Cross-site scripting in daifukuya.com Kagemai

Priority LOW 29

Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00783 Published 2021-04-07 No fix listed CWE-79