Vulnerabilities

TI-2025-12624 CVE-2025-13809 · GHSA-m5mq-qmxj-jm78

orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery

MEDIUM 57

A vulnerability has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2025-12-01 No fix listed CWE-918

TI-2025-12623 CVE-2025-13808 · GHSA-fxj6-w3mv-7pg7

HIGH 70

A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00524 Published 2025-12-01 No fix listed CWE-266

TI-2025-12622 CVE-2025-13807 · GHSA-2vgr-2fqq-2wwf

MEDIUM 57

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00399 Published 2025-12-01 No fix listed CWE-266