Vulnerabilities

TI-2022-14996 CVE-2022-34009 · GHSA-3632-grrp-f8wr

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via…

LOW 25

Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00363 Published 2022-07-27 No fix listed CWE-79

TI-2021-14730 CVE-2021-36377 · GHSA-4cqm-xv6v-78c5

LOW 34

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2021-07-12 No fix listed CWE-295

TI-2020-15086 CVE-2020-24614 · GHSA-83fw-5hmv-mmqf

MEDIUM 44

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03122 Published 2020-08-25 No fix listed CWE-862