Advisories · Technology
faction.
Every CVE that names faction among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates
- faction
- Authentication bypass
- CVSS 8.7 High
Faction: Stored XSS in Assessment Attachment Filename Preview Rendering
- faction
- Cross-site scripting (XSS)
- CVSS 8.7 High
Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering
- faction
- Cross-site scripting (XSS)
- CVSS 9.7 CriticalCritical · CVSS 9+
FACTION Unauthenticated Custom Extension Upload leads to RCE
- faction
- Authentication bypass
- CWE-829
- CVSS 7.5 High
FACTION Allows Authentication Bypass via User Creation
- faction
- Authentication bypass