Vulnerabilities

TI-2023-06547 CVE-2023-7159 · GHSA-cpj9-wvvx-v589

gopeak MasterLab User.php update unrestricted upload

MEDIUM 43

A vulnerability was found in gopeak MasterLab up to 3.3.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2023-12-29 No fix listed CWE-434

TI-2023-06535 CVE-2023-7147 · GHSA-7cfv-8gr7-hvw3

MEDIUM 43

A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2023-12-29 No fix listed CWE-434

TI-2023-06534 CVE-2023-7146 · GHSA-8jch-c3fw-9vgq

MEDIUM 50

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2023-12-29 No fix listed CWE-89

TI-2023-06533 CVE-2023-7145 · GHSA-54hg-4m42-28c5

MEDIUM 43

A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0065 Published 2023-12-29 No fix listed CWE-89

TI-2023-06532 CVE-2023-7144 · GHSA-f9cf-9v4j-77xr

MEDIUM 49

A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2023-12-29 No fix listed CWE-89

TI-2020-14576 CVE-2020-23534 · GHSA-mmc5-fxr8-4xpv

MEDIUM 45

A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01253 Published 2021-02-25 No fix listed CWE-918