Vulnerabilities

TI-2020-17920 CVE-2020-35249 · GHSA-828p-3mr9-7cff

Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to…

LOW 30

Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01162 Published 2021-11-02 No fix listed CWE-79

TI-2020-15245 CVE-2020-24925 · GHSA-87p9-xf94-p7qh

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3.

LOW 35

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2020-09-15 No fix listed CWE-209

TI-2020-15244 CVE-2020-24924 · GHSA-hfhh-qrv3-cq79

A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an…

LOW 26

A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00777 Published 2020-09-15 No fix listed CWE-79

Vulnerabilities

Filters

Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to…

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3.

A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an…