Advisories · Technology

Avalanche.

Every CVE that names Avalanche among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28128 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Unrestricted file upload in Avalanche
- Avalanche
- Unrestricted file upload
Not analysed yet 9 May 2023
CVE-2023-28127 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Path traversal in Avalanche
- Avalanche
- Path traversal
Not analysed yet 9 May 2023
CVE-2023-28126 CVE record

CVSS 5.9 Medium

Race condition in Avalanche
- Avalanche
- Race condition
- CWE-305
Not analysed yet 9 May 2023
CVE-2023-28125 CVE record

CVSS 5.9 Medium

Improper authentication in Avalanche
- Avalanche
- Authentication bypass
Not analysed yet 9 May 2023