Vulnerabilities
4 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2020-13994 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker. NVD description · AI analysis pending | 8.8 group max | 7% | PoC |
| — | |
| CVE-2020-13897 | HESK before 3.1.10 allows reflected XSS. HESK before 3.1.10 allows reflected XSS. NVD description · AI analysis pending | 6.1 | <1% |
| — |