Advisories · Technology

lirantal/daloradius.

Every CVE that names lirantal/daloradius among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-0338 CVE record

CVSS 5.8 Medium

Cross-site Scripting (XSS) - Reflected in lirantal/daloradius
- lirantal/daloradius
- Cross-site scripting (XSS)
Not analysed yet 17 Jan 2023
CVE-2023-0337 CVE record

CVSS 5.8 Medium

Cross-site Scripting (XSS) - Reflected in lirantal/daloradius
- lirantal/daloradius
- Cross-site scripting (XSS)
Not analysed yet 17 Jan 2023
CVE-2023-0048 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Code Injection in lirantal/daloradius
- lirantal/daloradius
- Code injection
Not analysed yet 4 Jan 2023
CVE-2023-0046 CVE record

CVSS 7.2 High

Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
- lirantal/daloradius
- CWE-641
Not analysed yet 4 Jan 2023
CVE-2022-4630 CVE record

CVSS 5.3 Medium

Sensitive Cookie Without 'HttpOnly' Flag in lirantal/daloradius
- lirantal/daloradius
- CWE-1004
Not analysed yet 21 Dec 2022
CVE-2022-4366 CVE record

CVSS 5.3 Medium

Missing Authorization in lirantal/daloradius
- lirantal/daloradius
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-23475 CVE record

CVSS 8.8 High

dalorRadius full account take over
- lirantal daloradius
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
Not analysed yet 6 Dec 2022