Advisories · Technology
NationalSecurityAgency skills-service.
Every CVE that names NationalSecurityAgency skills-service among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.6 CriticalCritical · CVSS 9+
NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
- NationalSecurityAgency skills-service
- Cross-site scripting (XSS)
- CWE-20
- CVSS 4.4 Medium
SkillTree CSRF Vulnerability allows an attacker to modify the Video and Captions of a Skill
- NationalSecurityAgency skills-service
- Cross-site request forgery (CSRF)