Advisories · Technology
MODSetter SurfSense.
Every CVE that names MODSetter SurfSense among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication
- MODSetter SurfSense
- Authentication bypass
- CVSS 5.3 Medium
MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgery
- MODSetter SurfSense
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
MODSetter SurfSense MCP Connector Integration test command injection
- MODSetter SurfSense
- Other injection
- Command injection