3 matches found
EUVD-2020-23328
Malware in sbrugna...
8.8CVSS8.6AI score0.01073EPSS
SaveExploits1References2
CVE-2020-35666
Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedosbase.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id$ne=1 value...
8.8CVSS7.2AI score0.01073EPSS
SaveExploits1
Sql injection
Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedosbase.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id$ne=1 value...
6.5CVSS8.7AI score0.01073EPSS
SaveExploits1References1Affected Software1
20