Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2018-19555 | tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password. tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password. NVD description · AI analysis pending | 8.8 | <1% | PoC |
| — | |
| CVE-2018-19301 | tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log. tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — |