Kiwitcms
11 CVEs across 3 Kiwitcms products. Browse Kiwitcms vulnerabilities, severities, and proof-of-concept exploits.
Kiwitcms products with known CVEs
Kiwitcms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-36809 | High | 8.1 | 2023-07-05 | Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prior to 12.5 had int… |
CVE-2023-33977 | High | 8.1 | 2023-06-06 | Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test case… |
CVE-2023-32686 | High | 8.1 | 2023-05-27 | Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test case… |
CVE-2023-30628 | High | 8.8 | 2023-04-24 | Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
the `changelog.yml` workflow is v… |
CVE-2023-30613 | High | 8.1 | 2023-04-24 | Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior to 12.2, th… |
CVE-2023-30544 | Low | 3.9 | 2023-04-24 | Kiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users were able to update their email addresses via the `My profile… |
CVE-2023-27489 | High | 7.6 | 2023-03-29 | Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could potentially… |
CVE-2023-25171 | High | 7.5 | 2023-02-15 | Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service atta… |
CVE-2023-25156 | High | 7.5 | 2023-02-15 | Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks ag… |
CVE-2023-22451 | Medium | 6.5 | 2023-01-02 | Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation… |
CVE-2022-4105 | Medium | 5.4 | 2022-11-21 | A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) an… |