iMind Server
by InterMind
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-25398 | Hig | 0.57 | 8.8 | 0.02 | Nov 5, 2020 | CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality. | ||
| CVE-2020-25399 | Hig | 0.51 | 7.8 | 0.01 | Nov 5, 2020 | Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. | ||
| CVE-2020-24765 | Hig | 0.49 | 7.5 | 0.07 | Oct 20, 2020 | InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request. |
- risk 0.57cvss 8.8epss 0.02
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
- risk 0.51cvss 7.8epss 0.01
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
- risk 0.49cvss 7.5epss 0.07
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.