Census vulnerabilities
We track 2 vulnerabilities in Census products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Census vulnerabilities
- 7.5 High severity
CSWeb: Exposure of Sensitive Information to an Unauthorized Actor
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.
- 8.8 High severity
CSWeb: Unrestricted Upload of File with Dangerous Type
Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.