Sparkdevnetwork Rock Rms
3 CVEs affecting Sparkdevnetwork Rock Rms. Latest disclosed: 2021-01-07. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18643 | Critical | 9.8 | 2021-01-07 | Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protection mechanism is a fil… |
CVE-2019-18642 | Critical | 9.8 | 2021-01-07 | Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and… |
CVE-2019-18641 | Critical | 9.8 | 2020-03-20 | Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller. |