Vulnerabilities

TI-2024-03457 CVE-2024-3707 · GHSA-94qf-5xc2-5vrq

Exposure of Information Through Directory Listing vulnerability in OpenGnsys

LOW 30

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0046 Published 2024-04-12 No fix listed CWE-548

TI-2024-03456 CVE-2024-3706 · GHSA-g949-gmj8-65gh

LOW 33

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00518 Published 2024-04-12 No fix listed CWE-200

TI-2024-03455 CVE-2024-3705 · GHSA-pjv5-66g3-7gqx

MEDIUM 41

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00765 Published 2024-04-12 No fix listed CWE-434

TI-2024-03454 CVE-2024-3704 · GHSA-rpjc-8hv7-4jhp

MEDIUM 50

SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-04-12 No fix listed CWE-89