Crowbar

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-3551 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly 1.4 and earlier, allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Crowbar

NVD Exploit-DB GitHub

CVSS 2.0

4.3

EPSS

3.5%

CVE-2012-3537 MEDIUM POC PATCH This Month

The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands. Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Crowbar

NVD GitHub

CVSS 2.0

4.6

EPSS

0.2%

CVE-2012-3551

EPSS 4% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Crowbar

NVD Exploit-DB GitHub

CVE-2012-3537

EPSS 0% CVSS 4.6

MEDIUM POC PATCH This Month

Privilege Escalation Crowbar

NVD GitHub