Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: MESbook Clear all filters
TI-2024-05965 CVE-2024-6427 · GHSA-xxqj-x2pv-x5jj

Uncontrolled resource consumption in MESbook

Priority MEDIUM 40

Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0057 Published 2024-07-03 No fix listed CWE-400
TI-2024-05964 CVE-2024-6426 · GHSA-f238-mg8w-5483

Information exposure vulnerability vulnerability in MESbook

Priority LOW 37

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00298 Published 2024-07-03 No fix listed CWE-200
TI-2024-05962 CVE-2024-6424 · GHSA-c5g4-5pgj-3vxf

Server-Side Request Forgery vulnerability in MESbook

Priority MEDIUM 41

External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST"…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00494 Published 2024-07-01 No fix listed CWE-918