Advisories · Technology
bluewave-labs Checkmate.
Every CVE that names bluewave-labs Checkmate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes
- bluewave-labs Checkmate
- Broken access control
- CVSS 7.5 High
Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled
- bluewave-labs Checkmate
- Information disclosure
- Hard-coded credentials
- CVSS 4.9 Medium
Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching
- bluewave-labs Checkmate
- Denial of service
- CVSS 7.5 High
Checkmate: Pre-auth Denial of Service via File Upload on Registration
- bluewave-labs Checkmate
- Denial of service
- CVSS 5.3 Medium
bluewave-labs Checkmate - User Enumeration via Differential HTTP Response in Password Recovery
- bluewave-labs Checkmate
- CWE-204
- CVSS 8.1 High
Mass Assignment Privilege Escalation in Checkmate
- bluewave-labs Checkmate
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Checkmate: Unauthenticated Access to Unpublished Status Page
- bluewave-labs Checkmate
- Information disclosure