Lucene search

K

4 matches found

CVE
CVE
added 2024/04/25 5:15 p.m.48 views

CVE-2024-25624

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper setup of Jinja2 environment, reports generation in iris-web is prone to a Server Side Template Injection (SSTI). Successful exploitation of the vulnerability c...

6.8CVSS7.4AI score0.00867EPSS
CVE
CVE
added 2024/02/19 8:15 p.m.43 views

CVE-2024-25640

Iris is a web collaborative platform that helps incident responders share technical details during investigations. A stored Cross-Site Scripting (XSS) vulnerability has been identified in iris-web, affecting multiple locations in versions prior to v2.4.0. The vulnerability may allow an attacker to ...

5.4CVSS4.3AI score0.00519EPSS
CVE
CVE
added 2023/05/25 6:15 p.m.33 views

CVE-2023-30615

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting (XSS) vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious scri...

6.3CVSS5.4AI score0.00544EPSS
CVE
CVE
added 2023/12/22 8:15 p.m.27 views

CVE-2023-50712

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting (XSS) vulnerability has been identified in iris-web, affecting multiple locations in versions prior to v2.3.7. The vulnerability may allow an attack...

5.4CVSS4.6AI score0.00433EPSS