Uvdesk Community-Skeleton
4 CVEs affecting Uvdesk Community-Skeleton. Latest disclosed: 2023-10-23. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37635 | Critical | 9.8 | 2023-10-23 | UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application. |
CVE-2023-0265 | High | 8.8 | 2023-04-04 | Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly vali… |
CVE-2023-0325 | Medium | 6.1 | 2023-04-04 | Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not co… |
CVE-2023-1197 | Medium | 4.8 | 2023-03-06 | Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0. |