Vulnerabilities

TI-2020-18620 CVE-2020-36365 · GHSA-5fmf-v8w4-327v

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache…

LOW 33

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03092 Published 2021-05-19 No fix listed CWE-601

TI-2020-18619 CVE-2020-36364 · GHSA-h45j-h84g-x6fh

An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.

MEDIUM 43

An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01802 Published 2021-05-19 No fix listed CWE-22

TI-2021-12276 CVE-2021-32607 · GHSA-j78g-jgcm-vcjj

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

HIGH 67

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33442 Published 2021-05-12 No fix listed

TI-2021-12277 CVE-2021-32608 · GHSA-mpph-4mx6-m33r

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

HIGH 67

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33442 Published 2021-05-12 No fix listed

TI-2020-17031 CVE-2020-27997

An issue was discovered in SmartStoreNET before 4.1.0.

MEDIUM 40

An issue was discovered in SmartStoreNET before 4.1.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00823 Published 2021-02-19 No fix listed CWE-352

TI-2020-17030 CVE-2020-27996

An issue was discovered in SmartStoreNET before 4.0.1.

MEDIUM 42

An issue was discovered in SmartStoreNET before 4.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02174 Published 2020-10-29 No fix listed

TI-2020-12015 CVE-2020-15243

WebApi Authentication attribute missing in Smartstore

MEDIUM 44

Affected versions of Smartstore have a missing WebApi Authentication attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01196 Published 2020-10-08 No fix listed CWE-287

Vulnerabilities

Filters

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache…

An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

An issue was discovered in SmartStoreNET before 4.1.0.

An issue was discovered in SmartStoreNET before 4.0.1.

WebApi Authentication attribute missing in Smartstore