Lucene search

Skipper Security Vulnerabilities

cve

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file.

9.8CVSS

9.5AI Score

0.003EPSS

2022-04-12 05:15 PM

cve

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

7.5CVSS

7.4AI Score

0.001EPSS

2022-06-23 05:15 PM

cve

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

9.8CVSS

9.3AI Score

0.026EPSS

2022-10-25 05:15 PM