Cervantes vulnerabilities
2 known vulnerabilities in Cervantes from CervantesSec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest first
- 8.7 High severity
cervantes: Improper Neutralization of Input During Web Page Generation
Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
- 7.1 High severity
cervantes: Missing Authorization
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects