Repetier Server
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-14450 | Cri | 0.65 | 9.8 | 0.10 | Oct 28, 2019 | A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location. When this is combined with CVE-2019-14451, an attacker can upload an "external… | ||
| CVE-2023-31060 | Cri | 0.64 | 9.8 | 0.01 | Apr 24, 2023 | Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise. | ||
| CVE-2019-14451 | Cri | 0.64 | 9.8 | 0.04 | Oct 25, 2019 | RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer… | ||
| CVE-2023-31061 | Hig | 0.57 | 8.8 | 0.00 | Apr 24, 2023 | Repetier Server through 1.4.10 does not have CSRF protection. | ||
| CVE-2023-31059 | Hig | 0.49 | 7.5 | 0.06 | Apr 24, 2023 | Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. |
- risk 0.65cvss 9.8epss 0.10
A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location. When this is combined with CVE-2019-14451, an attacker can upload an "external…
- risk 0.64cvss 9.8epss 0.01
Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.
- risk 0.64cvss 9.8epss 0.04
RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer…
- risk 0.57cvss 8.8epss 0.00
Repetier Server through 1.4.10 does not have CSRF protection.
- risk 0.49cvss 7.5epss 0.06
Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.