Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

22 records

Vendor: ethyca Clear all filters
TI-2024-20599 CVE-2024-31223 · GHSA-53q7-4874-24qg

Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

Priority MEDIUM 63

Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API_URL` is a server-side configuration environment variable used by the Fides Privacy Center to communicate with the Fides webserver backend.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01105 Published 2024-07-03 Fixed in 2.39.2rc0, 2.39.2 CWE-497
TI-2023-25454 CVE-2023-47114 · GHSA-3vpf-mcj7-5h38

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

Priority LOW 28

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2023-11-08 Fixed in 2.23.3 CWE-79
TI-2023-24766 CVE-2023-46124 · GHSA-jq3w-9mgf-43m4

Server-Side Request Forgery Vulnerability in Custom Integration Upload

Priority LOW 37

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code.

CVSS 3.1HIGH 8.2 Network High privileges No interaction EPSS 0.00839 Published 2023-10-24 Fixed in 2.22.1 CWE-918
TI-2023-24767 CVE-2023-46125 · GHSA-rjxg-rpg3-9r89

Fides Information Disclosure Vulnerability in Config API Endpoint

Priority LOW 31

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00919 Published 2023-10-24 Fixed in 2.22.1 CWE-200
TI-2023-24768 CVE-2023-46126 · GHSA-fgjj-5jmr-gh83

Fides JavaScript Injection Vulnerability in Privacy Center URL

Priority LOW 26

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0067 Published 2023-10-24 Fixed in 2.22.1 CWE-79
TI-2023-21919 CVE-2023-41319 · GHSA-p6p2-qq95-vq5h

Remote Code Execution in Custom Integration Upload in Fides

Priority MEDIUM 42

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00936 Published 2023-09-06 Fixed in 2.19.0 CWE-693
TI-2023-19088 CVE-2023-37480 · GHSA-g95c-2jgm-hqc6

Fides Webserver Vulnerable to Zip Bomb File Uploads

Priority LOW 24

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00685 Published 2023-07-18 Fixed in 2.16.0 CWE-400
TI-2023-19089 CVE-2023-37481 · GHSA-3rw2-wfc8-wmj5

Fides Webserver Vulnerable to SVG Bomb File Uploads

Priority LOW 24

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00704 Published 2023-07-18 Fixed in 2.16.0 CWE-400
TI-2023-18621 CVE-2023-36827 · GHSA-r25m-cr6v-p9hq

Fides vulnerable to Path Traversal in Webserver API

Priority MEDIUM 42

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01491 Published 2023-07-05 Fixed in 2.15.1 CWE-22