Benbusby Whoogle-Search
4 CVEs affecting Benbusby Whoogle-Search. Latest disclosed: 2024-01-23. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22205 | Critical | 9.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location`… |
CVE-2024-22203 | Critical | 9.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `s… |
CVE-2024-22417 | Medium | 6.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `… |
CVE-2024-22204 | Medium | 5.3 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle a… |