Lucene search

K

Fogproject Security Vulnerabilities

cve
cve

CVE-2023-46237

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited enumeration abilities to authenticated users was accessible to unauthenticated users. This enabled unauthenticated users to discover files and their...

5.8CVSS

5.2AI Score

0.001EPSS

2023-10-31 03:15 PM
26
cve
cve

CVE-2023-46235

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of request sanitization in the logs, a malicious request containing XSS would be stored in a log file. When an administrator of the FOG server logged in and viewed the...

6.1CVSS

5.9AI Score

0.0005EPSS

2023-10-31 03:15 PM
24
cve
cve

CVE-2023-46236

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, a server-side-request-forgery (SSRF) vulnerability allowed an unauthenticated user to trigger a GET request as the server to an arbitrary endpoint and URL scheme. This also allows remote...

8.6CVSS

7.7AI Score

0.001EPSS

2023-10-31 03:15 PM
25
cve
cve

CVE-2021-32243

FOGProject v1.5.9 is affected by a File Upload RCE...

8.8CVSS

8.6AI Score

0.001EPSS

2021-06-16 09:15 PM
40
2