Vulnerabilities

TI-2023-02881 CVE-2023-3075 · GHSA-3362-hf4h-mq66

Cross-Site Request Forgery (CSRF) in tsolucio/corebos

LOW 29

Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00316 Published 2023-06-02 Fixed in 8 CWE-352

TI-2023-02880 CVE-2023-3074 · GHSA-p9vj-c5qh-4c5j

MEDIUM 64

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00506 Published 2023-06-02 Fixed in 8 CWE-79

TI-2023-02879 CVE-2023-3073 · GHSA-fmwg-q6rr-267q

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-06-02 Fixed in 8 CWE-79

TI-2023-02877 CVE-2023-3071 · GHSA-4fg9-m5mh-cx2v

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00517 Published 2023-06-02 Fixed in 8 CWE-79

TI-2023-02876 CVE-2023-3070 · GHSA-gxfx-w4rg-8764

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00569 Published 2023-06-02 Fixed in 8 CWE-79

TI-2023-02875 CVE-2023-3069 · GHSA-gfxr-mvph-45qr

MEDIUM 43

Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2023-06-02 Fixed in 8 CWE-620

TI-2023-01441 CVE-2023-1527 · GHSA-5rvj-4rxp-67hv

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-03-21 Fixed in 8.0 CWE-79

TI-2022-04063 CVE-2022-4446 · GHSA-7xcv-hwp5-79fx

HIGH 75

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01352 Published 2022-12-13 Fixed in 8.0 CWE-98