agentprime: cvatEvery new CVE for cvat.https://agentprime.io/CVE-2026-73220: CVAT: Stored XSS via annotation guides in audio taskshttps://agentprime.io/advisories/CVE-2026-73220/https://agentprime.io/advisories/CVE-2026-73220/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 14:32:52 GMTCVECVE-2026-73221: CVAT: Flawed authorization logic in endpoints related to lambda requestshttps://agentprime.io/advisories/CVE-2026-73221/https://agentprime.io/advisories/CVE-2026-73221/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:22:10 GMTCVECVE-2026-73219: CVAT: Denial of service with regards to automatic annotationhttps://agentprime.io/advisories/CVE-2026-73219/https://agentprime.io/advisories/CVE-2026-73219/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:50:29 GMTCVECVE-2026-65986: CVAT has stored XSS via annotation guide assetshttps://agentprime.io/advisories/CVE-2026-65986/https://agentprime.io/advisories/CVE-2026-65986/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 20:13:47 GMTCVECVE-2026-47682: CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writeshttps://agentprime.io/advisories/CVE-2026-47682/https://agentprime.io/advisories/CVE-2026-47682/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 20:00:49 GMTCVECVE-2026-58373: CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existencehttps://agentprime.io/advisories/CVE-2026-58373/https://agentprime.io/advisories/CVE-2026-58373/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 15:58:22 GMTCVECVE-2026-44369: CVAT: Stored XSS via annotation guideshttps://agentprime.io/advisories/CVE-2026-44369/https://agentprime.io/advisories/CVE-2026-44369/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:32:15 GMTCVECVE-2026-23526: CVAT vulnerable to privilege escalation of users with staff statushttps://agentprime.io/advisories/CVE-2026-23526/https://agentprime.io/advisories/CVE-2026-23526/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 21:40:25 GMTCVECVE-2026-23516: CVAT vulnerable to XSS via skeleton SVG imageshttps://agentprime.io/advisories/CVE-2026-23516/https://agentprime.io/advisories/CVE-2026-23516/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 21:38:32 GMTCVECVE-2025-68430: CVAT vulnerable to directory traversal via mounted share listinghttps://agentprime.io/advisories/CVE-2025-68430/https://agentprime.io/advisories/CVE-2025-68430/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Dec 2025 17:11:46 GMTCVECVE-2025-64485: CVAT: Mounted share file overwrite via crafted requesthttps://agentprime.io/advisories/CVE-2025-64485/https://agentprime.io/advisories/CVE-2025-64485/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Nov 2025 23:21:06 GMTCVECVE-2025-54573: CVAT vulnerable to email verification bypass by use of basic authenticationhttps://agentprime.io/advisories/CVE-2025-54573/https://agentprime.io/advisories/CVE-2025-54573/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:32:03 GMTCVECVE-2025-49135: CVAT missing validation for in-progress backup upload nameshttps://agentprime.io/advisories/CVE-2025-49135/https://agentprime.io/advisories/CVE-2025-49135/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 15:05:41 GMTCVECVE-2025-48381: CVAT has information disclosure via browsable APIhttps://agentprime.io/advisories/CVE-2025-48381/https://agentprime.io/advisories/CVE-2025-48381/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 May 2025 03:38:24 GMTCVECVE-2025-23045: CVAT allows remote code execution via tracker Nuclio functionshttps://agentprime.io/advisories/CVE-2025-23045/https://agentprime.io/advisories/CVE-2025-23045/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jan 2025 15:19:26 GMTCVECVE-2024-47172: Computer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpointshttps://agentprime.io/advisories/CVE-2024-47172/https://agentprime.io/advisories/CVE-2024-47172/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Sep 2024 15:00:53 GMTCVECVE-2024-47064: Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpointshttps://agentprime.io/advisories/CVE-2024-47064/https://agentprime.io/advisories/CVE-2024-47064/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Sep 2024 14:57:12 GMTCVECVE-2024-47063: Computer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpointhttps://agentprime.io/advisories/CVE-2024-47063/https://agentprime.io/advisories/CVE-2024-47063/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Sep 2024 14:45:02 GMTCVECVE-2024-45393: Computer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliverieshttps://agentprime.io/advisories/CVE-2024-45393/https://agentprime.io/advisories/CVE-2024-45393/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Sep 2024 15:04:13 GMTCVECVE-2024-37306: CVAT's export and backup-related API endpoints are susceptible to CSRFhttps://agentprime.io/advisories/CVE-2024-37306/https://agentprime.io/advisories/CVE-2024-37306/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Jun 2024 14:18:28 GMTCVECVE-2024-37164: CVAT SSRF via custom cloud storage endpointshttps://agentprime.io/advisories/CVE-2024-37164/https://agentprime.io/advisories/CVE-2024-37164/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Jun 2024 14:10:16 GMTCVECVE-2022-31188: Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)https://agentprime.io/advisories/CVE-2022-31188/https://agentprime.io/advisories/CVE-2022-31188/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.48 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Aug 2022 00:00:00 GMTCVEcritical