Lucene search
K

7 matches found

CNNVD
CNNVD
added 2025/09/08 12:0 a.m.2 views

Fides 安全漏洞

Fides is an open source privacy engineering platform open-sourced by Ethyca to manage the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A security vulnerability exists in Fides versions prior to 2.69.1, which stems from an I...

7.5CVSS6.3AI score0.00042EPSS
Exploits0References4
EUVD
EUVD
added 2024/07/02 7:50 p.m.6 views

EUVD-2024-2328

Fides is an open-source privacy engineering platform. fides.js, a client-side script used to interact with the consent management features of Fides, used the polyfill.io domain in a very limited edge case, when it detected a legacy browser such as IE11 that did not support the fetch standard...

6.3AI score0.22233EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.1 views

Fides 安全漏洞

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A security vulnerability exists in Fides that stems from improper SQLAlchemy password string escaping, which...

3.3CVSS4.6AI score0.00099EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/11/15 12:0 a.m.3 views

Fides Security Vulnerabilities

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A security vulnerability exists in versions of Fides prior to 2.24.0 that stems from the use of a weakly...

9.1CVSS6.9AI score0.00415EPSS
Exploits0References4
Prion
Prion
added 2023/11/08 10:15 p.m.18 views

Input validation

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code. The Fides web application allows data subject users to request access to their personal data. If the...

5.8CVSS6.9AI score0.00208EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/10/24 10:51 p.m.15 views

CVE-2023-46124 Server-Side Request Forgery Vulnerability in Custom Integration Upload

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. The Fides web application allows a custom integration to be uploaded as a ZIP file containing configuration and...

8.2CVSS7.2AI score0.00107EPSS
Exploits0References5
OSV
OSV
added 2023/10/24 9:59 p.m.17 views

CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

3.9CVSS5.3AI score0.00156EPSS
Exploits0References5
Rows per page
Query Builder