IL
Product
I, Librarian
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 2Medium 7Low 0
Watch
Add I, Librarian to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000124 | 10.0 | Mar 13 | I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplexml_load_string) that can result in an… Affected: through 4.8 |
| CVE-2017-1000237 | 9.8 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password Affected: through 4.6; 4.7 |
| CVE-2017-1000235 | 9.8 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised Affected: through 4.6; 4.7 |
| CVE-2018-1000141 | 9.1 | Mar 23 | I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write… Affected: through 4.9 |
| CVE-2018-1000138 | 9.1 | Mar 23 | I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the… Affected: through 4.8 |
Showing 5