TI-2025-01223 CVE-2025-1421 · GHSA-g45p-2vh4-m46h
Formula injection in a CSV file in Proget MDM
Priority LOW 12
Data provided in a request performed to the server while activating a new device are put in a database.
Vulnerabilities
7 records
TI-2025-01222 CVE-2025-1420 · GHSA-3gf3-q286-fvmm
XSS in Proget MDM
Priority LOW 12
Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.
TI-2025-01221 CVE-2025-1419 · GHSA-4pr6-763c-5823
XSS in Proget MDM
Priority LOW 12
Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.
TI-2025-01220 CVE-2025-1418 · GHSA-mj8x-rmcg-j8qw
Information disclosure in Proget MDM
Priority LOW 23
A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which contain details about allowed/prohibited functions.
TI-2025-01219 CVE-2025-1417 · GHSA-897f-hr6q-h5f4
Information disclosure in Proget MDM
Priority LOW 21
In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by the MDM (Mobile Device Management).
TI-2025-01218 CVE-2025-1416 · GHSA-mf3r-gv2f-r4wr
Password disclosure in Proget MDM
Priority LOW 32
In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities restricted by the MDM (Mobile Device Management).
TI-2025-01217 CVE-2025-1415 · GHSA-rfvm-7wp6-hchg
Information disclosure in Proget MDM
Priority LOW 23
A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as details of the devices like their UUIDs needed for exploitation of CVE-2…