Vulnerabilities

TI-2022-08138 CVE-2022-24235 · GHSA-hg4r-vmj2-w3fq

A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows…

LOW 39

A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00722 Published 2022-03-21 No fix listed CWE-352

TI-2022-08139 CVE-2022-24236 · GHSA-xph5-6r3g-mmjq

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated…

LOW 18

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00559 Published 2022-03-21 No fix listed CWE-732

TI-2022-08140 CVE-2022-24237 · GHSA-h6x4-qf3x-8mpp

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command…

MEDIUM 59

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.25339 Published 2022-03-21 No fix listed CWE-78

Vulnerabilities

Filters

A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows…

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated…

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command…