Lucene search

Fuxa Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2023-31719

FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

9.8CVSS

9.8AI Score

0.001EPSS

2023-09-22 12:15 AM

2470

cve

CVE-2023-33831

A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.

9.8CVSS

9.6AI Score

0.21EPSS

2023-09-18 08:15 PM

2476