Vulnerabilities

TI-2024-15148 CVE-2024-22851 · GHSA-82rx-j336-57m8

Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker…

LOW 35

Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to the /static/ endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0119 Published 2024-02-02 No fix listed CWE-22

TI-2021-17764 CVE-2021-40840 · GHSA-wvx4-63c7-qh83

A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2.

LOW 25

A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00483 Published 2022-02-18 No fix listed CWE-79

TI-2021-17765 CVE-2021-40841 · GHSA-87f9-xhhm-637m

A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated…

LOW 31

A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01079 Published 2022-02-18 No fix listed CWE-22

Vulnerabilities

Filters

Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker…

A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2.

A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated…