Advisories · Technology
cervantes.
Every CVE that names cervantes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
IDOR: User reads and modifies findings from other people's projects
- cervantes
- Broken access control
- CVSS 5.4 Medium
BOLA Allows Cross-Project Target Tampering
- cervantes
- Broken access control
- CVSS 6.8 Medium
Stored XSS in the “Notes” field of project checklists
- cervantes
- Cross-site scripting (XSS)
- CVSS 7.1 High
Broken access control in JiraController
- cervantes
- Broken access control