Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2022-44009 Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V… Stackstorm Mitigation only Fix from $1,9502022-12-06 MEDIUM 5.4 CVE-2022-43706 Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules … Stackstorm 3.8.0+ Fix from $1,6002022-12-05 HIGH 8.8 CVE-2021-44657 In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of unsafe system commands. Jinja d… Stackstorm 3.6.0+ Fix from $1,9502021-12-15 HIGH 7.5 CVE-2021-28667 StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is … Stackstorm 3.4.1+ Fix from $1,9502021-03-18 MEDIUM 6.1 CVE-2019-9580 In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin valu… Stackstorm 2.9.3 / 2.10.3+ Fix from $1,6002019-03-09 MEDIUM 5.3 CVE-2018-20345 Incorrect access control in StackStorm API (st2api) in StackStorm before 2.9.2 and 2.10.x before 2.10.1 allows an attacker (who has a StackStorm acco… Stackstorm 2.9.2 / 2.10.1+ Fix from $1,6002018-12-21