Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: nette Clear all filters
TI-2022-06026 CVE-2022-21648 · GHSA-36m2-8rhx-f36j

Sandbox bypass in Latte templates

Priority LOW 37

Latte is an open source template engine for PHP.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00844 Published 2022-01-04 Fixed in 2.10.8, 2.9.6 +1 CWE-79
TI-2021-06193 CVE-2021-23803 · GHSA-6pj2-5fqq-xvjc

Access control bypass in latte/latte

Priority MEDIUM 45

This affects the package latte/latte before 2.10.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01628 Published 2021-12-17 Fixed in 2.10.6 CWE-863
TI-2020-11999 CVE-2020-15227 · GHSA-8gv3-3j7f-wg94

Remote code execution in nette application

Priority HIGH 67

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34424 Published 2020-10-01 Fixed in 2.0.19, 2.1.13 +4 CWE-74