Vulnerabilities

TI-2024-25694 CVE-2024-38447 · GHSA-mq58-p8pv-xx7f

NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a…

LOW 37

NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00407 Published 2024-07-17 No fix listed CWE-639

TI-2024-25693 CVE-2024-38446 · GHSA-xfp3-mm6f-4fw4

NATO NCI ANET 3.4.1 mishandles report ownership.

LOW 29

NATO NCI ANET 3.4.1 mishandles report ownership.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00347 Published 2024-07-17 No fix listed CWE-639

TI-2023-15057 CVE-2023-31441 · GHSA-vxw7-7p85-3x75

In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0…

MEDIUM 58

In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson and cause an exception.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00293 Published 2023-07-18 No fix listed CWE-476

Vulnerabilities

Filters

NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a…

NATO NCI ANET 3.4.1 mishandles report ownership.

In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0…