Vulnerabilities

TI-2022-23803 CVE-2022-48085 · GHSA-j9wr-m578-9wvj

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.

LOW 25

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2023-02-06 No fix listed CWE-79

TI-2022-19191 CVE-2022-40434 · GHSA-cw5r-qw3x-wgpf

HIGH 82

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01142 Published 2022-12-19 No fix listed CWE-79

TI-2022-14086 CVE-2022-32407 · GHSA-vqx5-7wv4-cx38

MEDIUM 60

Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2022-10-27 No fix listed CWE-79