CervantesSec vulnerabilities
We track 2 vulnerabilities in CervantesSec products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest CervantesSec vulnerabilities
- 8.7 High severity
cervantes: Improper Neutralization of Input During Web Page Generation
Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
- 7.1 High severity
cervantes: Missing Authorization
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects