Vulnerabilities

TI-2024-23439 CVE-2024-35451 · GHSA-qmpq-m6m5-57hh

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

MEDIUM 55

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00335 Published 2024-11-29 No fix listed CWE-918

TI-2023-05374 CVE-2023-5838 · GHSA-q95v-68h8-44x6

HIGH 75

Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00593 Published 2023-10-29 Fixed in v4.2.9 CWE-613

TI-2023-05376 CVE-2023-5840 · GHSA-cxh2-hxrp-wmgx

HIGH 71

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00783 Published 2023-10-29 Fixed in v4.2.9 CWE-640