Vulnerabilities > Automad

DATE CVE VULNERABILITY TITLE RISK
2023-12-21 CVE-2023-7038 Cross-Site Request Forgery (CSRF) vulnerability in Automad
A vulnerability was found in automad up to 1.10.9.
network
low complexity
automad CWE-352
6.5
2023-12-21 CVE-2023-7037 Server-Side Request Forgery (SSRF) vulnerability in Automad
A vulnerability was found in automad up to 1.10.9.
network
low complexity
automad CWE-918
8.8
2023-12-21 CVE-2023-7036 Cross-site Scripting vulnerability in Automad
A vulnerability was found in automad up to 1.10.9.
network
low complexity
automad CWE-79
5.4
2023-12-21 CVE-2023-7035 Cross-site Scripting vulnerability in Automad
A vulnerability was found in automad up to 1.10.9 and classified as problematic.
network
low complexity
automad CWE-79
5.4
2023-02-03 CVE-2021-37502 Cross-site Scripting vulnerability in Automad 1.7.5
Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
network
low complexity
automad CWE-79
5.4
2022-04-29 CVE-2022-1536 Cross-site Scripting vulnerability in Automad
A vulnerability has been found in automad up to 1.10.9 and classified as problematic.
network
low complexity
automad CWE-79
5.4