Raneto Project Raneto
3 CVEs affecting Raneto Project Raneto. Latest disclosed: 2022-08-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35143 | Critical | 9.8 | 2022-08-04 | Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks. |
CVE-2022-35142 | High | 7.5 | 2022-08-04 | An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter. |
CVE-2022-35144 | Medium | 4.8 | 2022-08-04 | Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. |