Advisories · Technology
openbullet2.
Every CVE that names openbullet2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header
- openbullet2
- CWE-305
- CVSS 8.7 High
OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint
- openbullet2
- Path traversal
- CVSS 8.7 High
OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface
- openbullet2
- Code injection
- CVSS 8.7 High
OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload
- openbullet2
- Command injection
- CVSS 7.1 High
OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source
- openbullet2
- Hard-coded credentials