Mind: >> Imind Server Security Vulnerabilities
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
CVSS Score
8.8
EPSS Score
0.095
Published
2020-11-05
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
CVSS Score
7.8
EPSS Score
0.003
Published
2020-11-05
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.
CVSS Score
7.5
EPSS Score
0.533
Published
2020-10-20