Scytl Secure Vote
4 CVEs affecting Scytl Secure Vote. Latest disclosed: 2021-02-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25022 | Critical | 9.8 | 2021-02-27 | An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event… |
CVE-2019-25021 | High | 7.5 | 2021-02-27 | An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the ad… |
CVE-2019-25020 | High | 7.5 | 2021-02-27 | An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configurat… |
CVE-2019-25023 | Medium | 6.5 | 2021-02-27 | An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the intern… |