Advisories · Technology
Mist Community Edition.
Every CVE that names Mist Community Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Mist Community Edition Authentication Endpoint views.py login cross site scripting
- Mist Community Edition
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Mist Community Edition views.py tag_resources cross site scripting
- Mist Community Edition
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Mist Community Edition middleware.py session_start_response cross-site request forgery
- Mist Community Edition
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 6.9 Medium
Mist Community Edition API Token views.py create_token access control
- Mist Community Edition
- Privilege escalation
- Broken access control