Vince vulnerabilities

1 known vulnerability in Vince from Cert. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  VINCE - The Vulnerability Information and…: Deserialization of Untrusted Data

  CVE-2022-40238Oct 26, 2022CERT/CCEPSS 1.52%

  A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.