Export limit exceeded: 425758 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 26

Export CSV
CVE-2022-0527

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2022-0526

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2021-3813

Improper Privilege Management in chatwoot/chatwoot

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2021-3649

Inefficient Regular Expression Complexity in chatwoot/chatwoot

chatwoot is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2021-3741

Stored Cross-site Scripting (XSS) in chatwoot/chatwoot

A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malicious XSS payload in the profile settings. When the avatar is opened in a new page, the custom JavaScript code is executed, leading to potential security risks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot
CVE-2021-3742

Server-Side Request Forgery (SSRF) in chatwoot/chatwoot

A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a malicious SSRF payload. When the SVG file is used as an avatar and opened in a new tab, it can trigger the SSRF, potentially leading to host redirection.

CVSS 3.1 · 7.9 High EPSS < 1% KEV · Not listed
Vendors
Chatwoot
Products
Chatwoot