Vulnerabilities

TI-2020-16153 CVE-2020-26507 · GHSA-rqqh-wq9c-mq63

A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web…

LOW 36

A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01012 Published 2020-11-05 No fix listed CWE-1236

TI-2020-16151 CVE-2020-26505 · GHSA-xqhw-rfc8-5rgf

A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with…

LOW 28

A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allows an attacker to inject code that will later be executed by legitimate users when they open the assets contai…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00709 Published 2020-11-05 No fix listed CWE-79

TI-2020-16152 CVE-2020-26506 · GHSA-fx3j-f5h6-7x3w

An Authorization Bypass vulnerability in the Marmind web application with version…

LOW 21

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00797 Published 2020-11-05 No fix listed CWE-670

Vulnerabilities

Filters

A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web…

A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with…

An Authorization Bypass vulnerability in the Marmind web application with version…