Vulnerabilities

TI-2013-05920 CVE-2013-7251 · GHSA-43h7-vvrf-6gmp

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/d…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01103 Published 2014-01-02 No fix listed CWE-352

TI-2013-05919 CVE-2013-7250 · GHSA-46r4-fm53-62xh

Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in…

LOW 20

Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01475 Published 2014-01-02 No fix listed CWE-79

TI-2011-04542 CVE-2011-5269 · GHSA-hf47-ffvj-wm45

Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote…

LOW 19

Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a validation message.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01068 Published 2014-01-02 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3…

Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in…

Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote…