Priority LOW 25
SteVe is an open-source EV charging station management system.
Vulnerabilities
5 records
TI-2024-30014 CVE-2024-44843 · GHSA-g2fr-wj73-rxrw
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass…
Priority HIGH 68
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.
TI-2024-14305 CVE-2024-21550 · GHSA-g97m-fwww-wqf3
Cross-site scripting in SteVe
Priority LOW 27
SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points.
TI-2024-16726 CVE-2024-25407 · GHSA-hg7g-ghrw-94pc
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a…
Priority HIGH 72
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.
TI-2023-28535 CVE-2023-52096 · GHSA-5798-fpq9-x4vx
SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with…
Priority LOW 34
SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a time…