Liima

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-26093 CRITICAL PATCH Act Now

Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

SQLi Liima

NVD GitHub

CVSS 3.1

9.8

EPSS

0.9%

CVE-2023-26092 CRITICAL PATCH Act Now

Liima before 1.17.28 allows server-side template injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Liima

NVD GitHub

CVSS 3.1

9.8

EPSS

0.9%

CVE-2023-26093

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

SQLi Liima

NVD GitHub

CVE-2023-26092

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Liima before 1.17.28 allows server-side template injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Liima

NVD GitHub