Security Vulnerabilities - CVEs Published In November 2021
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
5.4
EPSS Score
0.001
Published
2021-11-13
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
4.3
EPSS Score
0.001
Published
2021-11-13
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
4.3
EPSS Score
0.001
Published
2021-11-13
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
CVSS Score
7.6
EPSS Score
0.003
Published
2021-11-13
twill is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
6.3
EPSS Score
0.001
Published
2021-11-13
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score
3.9
EPSS Score
0.002
Published
2021-11-13
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score
8.8
EPSS Score
0.004
Published
2021-11-13
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Score
9.8
EPSS Score
0.011
Published
2021-11-13
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
5.4
EPSS Score
0.001
Published
2021-11-13
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score
4.3
EPSS Score
0.001
Published
2021-11-13