Vulnerabilities

TI-2025-40043 CVE-2025-64695 · GHSA-x7cr-qf6v-5p76

Uncontrolled search path in LogStare Inc. Installer of LogStare Collector

LOW 38

Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows).

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00162 Published 2025-11-21 No fix listed CWE-427

TI-2025-39739 CVE-2025-64299 · GHSA-7jcw-93c6-pr83

LOW 30

LogStare Collector improperly handles the password hash data.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.0028 Published 2025-11-21 No fix listed CWE-201

TI-2025-38879 CVE-2025-62687 · GHSA-4mr3-hh84-8hpp

LOW 29

Cross-site request forgery vulnerability exists in LogStare Collector.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00155 Published 2025-11-21 No fix listed CWE-352

TI-2025-38507 CVE-2025-62189 · GHSA-hww3-8vh8-6jhg

LOW 24

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00246 Published 2025-11-21 No fix listed CWE-863

TI-2025-38293 CVE-2025-61949 · GHSA-5rgf-9775-8772

LOW 21

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00188 Published 2025-11-21 No fix listed CWE-79

TI-2025-35936 CVE-2025-58097 · GHSA-8mxp-vvjc-j78g

LOW 29

The installation directory of LogStare Collector is configured with incorrect access permissions.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00131 Published 2025-11-21 No fix listed CWE-276