Vulnerabilities

TI-2024-28585 CVE-2024-42733 · GHSA-6m5m-3phv-f8fm

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute…

MEDIUM 51

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01052 Published 2025-03-07 No fix listed CWE-94

TI-2023-10690 CVE-2023-25266 · GHSA-7mjw-898c-2hq9

HIGH 79

An issue was discovered in Docmosis Tornado prior to version 2.9.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01634 Published 2023-02-28 No fix listed

TI-2023-10689 CVE-2023-25265 · GHSA-v8p7-4m38-955w

HIGH 66

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2023-02-28 No fix listed CWE-22

TI-2023-10688 CVE-2023-25264 · GHSA-xh63-f847-m5r7

HIGH 66

An issue was discovered in Docmosis Tornado prior to version 2.9.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00961 Published 2023-02-28 No fix listed CWE-287