Freetakserver-ui Project vulnerabilities
We track 2 vulnerabilities in Freetakserver-ui Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2022.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Freetakserver-ui Project vulnerabilities
- 8.8 High severity
Freetakserver-ui: Use of Hard-coded Credentials
FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.
- 7.5 High severity
Freetakserver-ui: Missing Authentication for Critical Functionality
An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users.