Freetakserver-ui Project
Freetakserver-ui Project Freetakserver-ui: vulnerabilidades y CVE
Freetakserver-ui Project Freetakserver-ui tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-25512 | Alta (7.5) | 1.1% | — | 11 mar 2022 | FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys. |
| CVE-2022-25511 | Media (6.5) | 0.74% | — | 11 mar 2022 | An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system. |
| CVE-2022-25510 | Alta (8.8) | 1.1% | — | 11 mar 2022 | FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges. |
| CVE-2022-25508 | Alta (7.5) | 1.0% | — | 11 mar 2022 | An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create… |
| CVE-2022-25507 | Media (5.4) | 0.49% | — | 11 mar 2022 | FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter. |
| CVE-2022-25506 | Media (6.5) | 0.88% | — | 11 mar 2022 | FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser. |