Dradisframework

CVE-2023-50458 Jul 10, 04:15 LOW PATCH Monitor

A security vulnerability in Dradis (CVSS 3.5). Remediation should follow standard vulnerability management procedures.

CVE-2023-50786 Jul 05, 04:15 MEDIUM This Month

A remote code execution vulnerability in Dradis through 4.16.0 (CVSS 4.1). Remediation should follow standard vulnerability management procedures.

CVE-2023-31223 Apr 25, 23:15 MEDIUM This Month

Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2022-30028 Jun 24, 17:15 MEDIUM This Month

Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

CVE-2019-5925 Mar 12, 22:29 MEDIUM This Month

Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.