Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/13 3:46 p.m.5 views

PYSEC-2026-2553 Kiwi TCMS's /init-db/ page renders and responds to requests after first use

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of the command line. In previous versions of Kiwi TCMS this page still renders and responds to requests even after first use. Impact The /init-db/ page does not require any user...

6.9CVSS6AI score0.00048EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/02 8:55 p.m.3 views

GHSA-V8RP-6XCV-FWGH Kiwi TCMS's /init-db/ page renders and responds to requests after first use

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of the command line. In previous versions of Kiwi TCMS this page still renders and responds to requests even after first use. Impact The /init-db/ page does not require any user...

6.9CVSS5.8AI score0.00048EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.13 views

PT-2026-55455

Name of the Vulnerable Software and Affected Versions Kiwi TCMS affected versions not specified Description The /init-db/ endpoint, used for initial database setup via a browser, remains accessible and responds to requests even after the initial setup is complete. This endpoint does not require...

6.9CVSS6.1AI score0.00048EPSS
SaveExploits0References7
Rows per page
Query Builder