daloRADIUS
by DaloRADIUS
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-0048 | Hig | 0.03 | 8.8 | 0.32 | Jan 4, 2023 | Code Injection in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2023-0338 | Med | 0.00 | 6.1 | 0.00 | Jan 17, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2023-0337 | Med | 0.00 | 6.1 | 0.00 | Jan 17, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2023-0046 | Hig | 0.00 | 7.2 | 0.01 | Jan 4, 2023 | Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2022-4630 | Med | 0.00 | 5.3 | 0.01 | Dec 21, 2022 | Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master. | ||
| CVE-2022-4366 | Hig | 0.00 | 7.5 | 0.01 | Dec 8, 2022 | Missing Authorization in GitHub repository lirantal/daloradius prior to master branch. | ||
| CVE-2022-23475 | Hig | 0.00 | 8.8 | 0.00 | Dec 6, 2022 | daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting (XSS) and cross site request forgery (CSRF) vulnerability which leads to account takeover in the mng-del.php file because of an unescaped… | ||
| CVE-2009-4347 | 0.00 | — | 0.01 | Dec 17, 2009 | Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. |
- risk 0.03cvss 8.8epss 0.32
Code Injection in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 7.2epss 0.01
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 5.3epss 0.01
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.
- risk 0.00cvss 7.5epss 0.01
Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
- risk 0.00cvss 8.8epss 0.00
daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting (XSS) and cross site request forgery (CSRF) vulnerability which leads to account takeover in the mng-del.php file because of an unescaped…
- CVE-2009-4347Dec 17, 2009risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.