Ametys

2 CVEs across 2 Ametys products. Browse Ametys vulnerabilities, severities, and proof-of-concept exploits.

Ametys products with known CVEs

ProductCVEs
Ametys4
Ametys Cms1
Ametys CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-50937Medium6.12026-01-13Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malici…
CVE-2024-30614Medium5.32024-04-12An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope.
CVE-2022-26159Medium5.32022-02-28The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-comple…
CVE-2017-16935Critical9.82017-11-24Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions vi…