Vulnerabilities

TI-2020-13509 CVE-2020-19001 · GHSA-w873-xcqq-x922

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute…

MEDIUM 49

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04325 Published 2021-08-27 Fixed in 1.6.2.2 CWE-77

TI-2020-13508 CVE-2020-19000 · GHSA-fqr5-qphf-vfr8

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to…

LOW 29

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01119 Published 2021-08-27 Fixed in 1.6.2.2 CWE-79

Vulnerabilities

Filters

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute…

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to…