Cellopoint Cellos
3 CVEs affecting Cellopoint Cellos. Latest disclosed: 2020-08-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-17385 | High | 7.5 | 2020-08-25 | Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access ar… |
CVE-2020-17384 | High | 7.2 | 2020-08-25 | Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remote… |
CVE-2020-17386 | Medium | 6.5 | 2020-08-25 | Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL para… |