Vulnerabilities

TI-2020-12500 CVE-2020-15882 · GHSA-pxq6-c239-f4ph

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers…

LOW 36

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00619 Published 2020-07-23 No fix listed CWE-352

TI-2020-12502 CVE-2020-15884 · GHSA-4wqr-p7fx-5x8g

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows…

MEDIUM 41

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01234 Published 2020-07-23 No fix listed CWE-89

TI-2020-12503 CVE-2020-15885 · GHSA-vc4f-2g7f-pmqr

A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for…

LOW 26

A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00936 Published 2020-07-23 Fixed in 4.0 CWE-79

TI-2020-08211 CVE-2020-10190 · GHSA-mfh7-9vc7-2vcq

An issue was discovered in MunkiReport before 5.3.0.

MEDIUM 41

An issue was discovered in MunkiReport before 5.3.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01238 Published 2020-03-09 No fix listed CWE-89

TI-2020-08212 CVE-2020-10191 · GHSA-xvp4-22jh-479g

An issue was discovered in MunkiReport before 5.3.0.

LOW 25

An issue was discovered in MunkiReport before 5.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2020-03-09 No fix listed CWE-79

TI-2020-08213 CVE-2020-10192 · GHSA-hgx7-g7w4-8845

An issue was discovered in Munkireport before 5.3.0.3923.

LOW 29

An issue was discovered in Munkireport before 5.3.0.3923.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00753 Published 2020-03-09 No fix listed CWE-79

Vulnerabilities

Filters

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers…

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows…

A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for…

An issue was discovered in MunkiReport before 5.3.0.

An issue was discovered in MunkiReport before 5.3.0.

An issue was discovered in Munkireport before 5.3.0.3923.