CVE-2021-39165

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the "SearchableTraitscopeSearch". Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password a...

CVE-2021-39165: Improper Authentication

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

PT-2021-22422

Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.5 Description The issue is a SQL injection vulnerability located in the SearchableTraitscopeSearch function. This vulnerability can be exploited by attackers without authentication to exfiltrate sensitive data from t...