Freetakserver-ui vulnerabilities

2 known vulnerabilities in Freetakserver-ui from Freetakserver-ui Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Freetakserver-ui: Use of Hard-coded Credentials

  CVE-2022-25510Mar 11, 2022Freetakserver-ui ProjectEPSS 1.05%

  FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

• 7.5 High severity

  Freetakserver-ui: Missing Authentication for Critical Functionality

  CVE-2022-25508Mar 11, 2022Freetakserver-ui ProjectEPSS 1.06%

  An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users.