Vulnerabilities

TI-2020-18840 CVE-2020-36647 · GHSA-wvq3-mfmm-c65c

YunoHost-Apps transmission_ynh nginx.conf path traversal

LOW 26

A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00736 Published 2023-01-08 No fix listed CWE-22

TI-2018-08091 CVE-2018-11348 · GHSA-27c7-2m8c-v368

LOW 25

Two XSS vulnerabilities are located in the profile edition page of the user panel of the YunoHost 2.7.2 through 2.7.14 web application.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2018-12-04 No fix listed CWE-79

TI-2018-08090 CVE-2018-11347 · GHSA-g2pg-xwqc-r429

MEDIUM 41

The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01324 Published 2018-12-04 No fix listed CWE-113