iris-web vulnerabilities
2 known vulnerabilities in iris-web from Dfir-iris. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest first
- 7.1 High severity
iris-web: Improper Authorization
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at `/graphql` that does not enforce the same authorization checks as the
- 8.1 High severity
iris-web: Unrestricted Upload of File with Dangerous Type
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the file_local_name field combined w