Benbusby Whoogle Search
5 CVEs affecting Benbusby Whoogle Search. Latest disclosed: 2025-04-16. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22205 | Critical | 9.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location`… |
CVE-2024-22203 | Critical | 9.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `s… |
CVE-2024-53305 | High | 7.3 | 2025-04-16 | An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query. |
CVE-2024-22417 | Medium | 6.1 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `… |
CVE-2024-22204 | Medium | 5.3 | 2024-01-23 | Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle a… |