Vulnerabilities

TI-2018-05122 CVE-2018-7057 · GHSA-g6jf-2287-2h68

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.

LOW 28

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2018-02-15 No fix listed CWE-79

TI-2018-05121 CVE-2018-7056 · GHSA-cxx8-pmxr-m9gr

LOW 26

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01085 Published 2018-02-15 No fix listed CWE-200

TI-2018-05120 CVE-2018-7055 · GHSA-rg43-2qfx-hv4g

LOW 35

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2018-02-15 No fix listed CWE-918