Vulnerabilities

TI-2022-19339 CVE-2022-40704 · GHSA-9447-mqqf-hxwj

A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.

MEDIUM 60

A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00629 Published 2023-01-17 No fix listed CWE-79

TI-2022-00489 CVE-2022-0571 · GHSA-3mh2-w3f5-px2v

LOW 30

Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01314 Published 2022-02-13 Fixed in 10.8.2 CWE-79

TI-2022-00174 CVE-2022-0238 · GHSA-3wqv-g56j-g5xc

LOW 22

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0084 Published 2022-01-16 Fixed in 10.8.0 CWE-352

TI-2022-00134 CVE-2022-0196 · GHSA-3p63-fm6g-x8fh

LOW 39

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00757 Published 2022-01-13 Fixed in 10.8 CWE-352

TI-2022-00135 CVE-2022-0197 · GHSA-75r7-c6p8-hx2j

MEDIUM 40

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00833 Published 2022-01-13 Fixed in 10.8 CWE-352

TI-2022-00099 CVE-2022-0157 · GHSA-c5r9-p98m-5773

LOW 27

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01112 Published 2022-01-10 Fixed in 10.8.0 CWE-79