Vulnerabilities

TI-2020-15542 CVE-2020-25398 · GHSA-g2vc-gpm2-rp4w

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

MEDIUM 42

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01978 Published 2020-11-05 No fix listed CWE-1236

TI-2020-15543 CVE-2020-25399 · GHSA-23xm-3rwj-r45h

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another…

LOW 36

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01023 Published 2020-11-05 No fix listed CWE-79

TI-2020-15189 CVE-2020-24765 · GHSA-p97m-c3p6-rw68

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read…

MEDIUM 43

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06798 Published 2020-10-20 No fix listed CWE-425

Vulnerabilities

Filters

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another…

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read…