Skip to main content

Atrocore

3 CVEs product

Monthly

CVE-2024-0696 Jan 18, 23:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Atrocore Atropim
NVD VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2023-26969 Apr 14, 02:15 HIGH POC This Week

Atropim 1.5.26 is vulnerable to Directory Traversal. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Atrocore Atropim
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2023-26968 Mar 29, 17:15 CRITICAL POC Act Now

In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Atrocore
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Atrocore Atropim
NVD VulDB
EPSS 1% CVSS 7.5
HIGH POC This Week

Atropim 1.5.26 is vulnerable to Directory Traversal. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Atrocore Atropim
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Atrocore
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy