Steedos

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-35666 HIGH POC This Week

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Steedos

NVD GitHub

CVSS 3.1

8.8

EPSS

1.1%

CVE-2020-35666

EPSS 1% CVSS 8.8

HIGH POC This Week

Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Steedos

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy