Lucene search
MitreCaldera
2 matches found
CVE-2020-10807
auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header.
5.3CVSS5.4AI score0.00297EPSS
CVE-2020-14462
CALDERA 2.7.0 allows XSS via the Operation Name box.
5.4CVSS5.2AI score0.00191EPSS