Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: tailscale Clear all filters
TI-2022-20266 CVE-2022-41925 · GHSA-qccm-wmcq-pwr6

Tailscale daemon is vulnerable to information disclosure via CSRF

Priority HIGH 71

A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables.

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.00566 Published 2022-11-23 Fixed in 1.32.3 CWE-352
TI-2022-20265 CVE-2022-41924 · GHSA-vqp6-rc3h-83cp

Tailscale Windows daemon is vulnerable to RCE via CSRF

Priority HIGH 74

A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01852 Published 2022-11-23 Fixed in 1.32.3 CWE-346