Vulnerabilities

TI-2022-15858 CVE-2022-35142 · GHSA-xxc2-j7jj-6g5m

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a…

LOW 36

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01592 Published 2022-08-04 Fixed in 0.17.1 CWE-287

TI-2022-15859 CVE-2022-35143 · GHSA-7942-2fx8-qhpf

MEDIUM 45

Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01706 Published 2022-08-04 Fixed in 0.17.1 CWE-521

TI-2022-15860 CVE-2022-35144 · GHSA-vc68-6x72-w22f

LOW 24

Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00937 Published 2022-08-04 Fixed in 0.17.1 CWE-79