Vulnerabilities

TI-2026-04578 CVE-2026-5242 · GHSA-qv7c-w6cp-c775

Code Injection in Mia Technologies' Pizzy Library

MEDIUM 40

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00304 Published 2026-06-15 Fixed in 1.3.9.26250 CWE-1236

TI-2026-04570 CVE-2026-5233 · GHSA-6554-rh36-hfh2

Missing Rate Limiting in Mia Technologies' Pizzy Library

LOW 31

Improper Control of Interaction Frequency vulnerability in MIA Technology Inc.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00205 Published 2026-06-15 Fixed in 1.3.9.26250 CWE-799

TI-2026-04568 CVE-2026-5230 · GHSA-q45q-8hg9-fpfw

Improper Access Control in Mia Technologies' Pizzy Library

LOW 30

Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00174 Published 2026-06-15 Fixed in 1.3.9.26250 CWE-284

TI-2024-03061 CVE-2024-3264 · GHSA-mh9w-xrcc-rrjc

Broken or Risky Cryptographic Algorithm in Mia Technology's Mia-Med Health Aplication

LOW 29

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Mia Technology Inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00207 Published 2024-06-24 Fixed in 1.0.14 CWE-327

TI-2024-05436 CVE-2024-5862 · GHSA-27x5-h3jg-f385

User Enumeration in Mia Technology's Mia-Med Health Aplication

LOW 33

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2024-06-24 Fixed in 1.0.14 CWE-307

TI-2023-05975 CVE-2023-6519 · GHSA-p4rq-vwgg-386f

Seeing admin password hash value in Mia Technology's Mia-Med

LOW 39

Exposure of Data Element to Wrong Session vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00502 Published 2024-02-08 Fixed in 1.0.7 CWE-488

TI-2023-05974 CVE-2023-6518 · GHSA-rm4j-xw99-x97h

Password Disclosure in Mia Technology's Mia-Med

LOW 39

Plaintext Storage of a Password vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-08 Fixed in 1.0.7 CWE-256

TI-2023-05973 CVE-2023-6517 · GHSA-wfhx-9fx9-r5gm

Seeing the SMS Verification Code in Mia Technology's Mia-Med

LOW 39

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00473 Published 2024-02-08 Fixed in 1.0.7 CWE-213

TI-2023-05971 CVE-2023-6515 · GHSA-pmqc-v2g6-qw5w

IDOR in Mia Technology's Mia-Med

MEDIUM 41

Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00566 Published 2024-02-08 Fixed in 1.0.7 CWE-639

TI-2022-03451 CVE-2022-3760 · GHSA-8525-g6v6-vc84

SQLi in Mia-Med

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.0.58 CWE-89

Vulnerabilities

Filters