Vulnerabilities > Codiad > High

DATE CVE VULNERABILITY TITLE RISK
2023-02-21 CVE-2017-20178 Unspecified vulnerability in Codiad 2.8.0
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0.
network
low complexity
codiad
7.5
2020-08-24 CVE-2020-14044 Server-Side Request Forgery (SSRF) vulnerability in Codiad
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later.
network
low complexity
codiad CWE-918
7.2
2020-08-24 CVE-2020-14043 Cross-Site Request Forgery (CSRF) vulnerability in Codiad
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later.
network
low complexity
codiad CWE-352
8.8
2020-03-16 CVE-2019-19208 Code Injection vulnerability in Codiad
Codiad Web IDE through 2.8.4 allows PHP Code injection.
network
low complexity
codiad CWE-94
7.5
2017-08-21 CVE-2017-11366 OS Command Injection vulnerability in Codiad
components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.
network
low complexity
codiad CWE-78
7.5