Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-60946

Census CSWeb path traversal

Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Census Csprousers
Products
Csweb Csweb
CVE-2025-60947

Census CSWeb arbitrary file upload

Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Census Csprousers
Products
Csweb Csweb
CVE-2025-60948

Census CSWeb stored XSS

Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Census Csprousers
Products
Csweb Csweb
CVE-2025-60949

Census CSWeb leaked configuration files

Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Census Csprousers
Products
Csweb Csweb