Vulnerabilities

TI-2023-22064 CVE-2023-41631 · GHSA-v986-xf39-cqrw

eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE)…

HIGH 73

eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01383 Published 2023-10-17 No fix listed CWE-434

TI-2023-22063 CVE-2023-41630 · GHSA-j5wm-92c4-p546

HIGH 82

eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01478 Published 2023-10-17 No fix listed CWE-94

TI-2023-22062 CVE-2023-41629 · GHSA-w25v-58xw-9xcx

HIGH 72

A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00829 Published 2023-10-17 No fix listed CWE-34