Automad

8 CVEs across 1 Automad products. Browse Automad vulnerabilities, severities, and proof-of-concept exploits.

Automad products with known CVEs

ProductCVEs
Automad8
Automad CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-40111Medium4.82024-08-23A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject m…
CVE-2024-40400High8.82024-07-19An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
CVE-2023-7038Medium4.32023-12-21A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file /dashboard?controll…
CVE-2023-7037Medium6.32023-12-21A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the file FileController…
CVE-2023-7036Medium4.72023-12-21A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function upload of the file FileCollectionController…
CVE-2023-7035Low2.42023-12-21A vulnerability was found in automad up to 1.10.9 and classified as problematic. Affected by this issue is some unknown functionality of the file packages\stan…
CVE-2021-37502Medium5.42023-02-03Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
CVE-2022-1536Low3.52022-04-29A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argumen…