CVE-2023-33977

CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...

WS-2023-0074

No Protection against Bruteforce attacks on Login page was found in kiwitcms/kiwi. The server should have block the continues request to avoid the DOS attacks. and eventually we can login with the correct password without any blocking message. The issue is patched in version 12.0...

WS-2022-0456

No rate limiting on the reset password page will lead to a DOS attack and inbox flooding for any user in kiwitcms/kiwi prior to 12.0. An attacker is able to take advantage of the reset password confirmation mechanism and send a large number of emails to anyone , as well as perform a DoS attack by...

CVE-2023-30628: Improper Neutralization of Special Elements used in an OS Command

Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior, the changelog.yml workflow is vulnerable to command injection attacks because of using an untrusted github.headref field. The github.headref value is an attacker-controlle...

CVE-2022-4105 Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...