Advisories · Technology
OpenCATS.
Every CVE that names OpenCATS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
- OpenCATS
- Other injection
- Code injection
- CVSS 7.6 High
OpenCATS: Authenticated SQL injection in activity DataGrid date filters
- OpenCATS
- SQL injection
- CWE-20
- CVSS 6.3 Medium
OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel
- OpenCATS
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent
- OpenCATS
- Broken access control
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports
- OpenCATS
- Broken access control
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
- OpenCATS
- Broken access control
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints
- OpenCATS
- Broken access control
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php
- OpenCATS
- Broken access control
- CVSS 5.3 Medium
OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints
- OpenCATS
- Broken access control
- CVSS 6.3 Medium
OpenCATS Career Portal CareersUI.php processLogin excessive authentication
- OpenCATS
- Authentication bypass
- CWE-799
- CVSS 9.1 CriticalCritical · CVSS 9+
OpenCATS: Authenticated RCE in the Import module
- OpenCATS
- Unrestricted file upload
- CVSS 8.6 High
OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column
- OpenCATS
- SQL injection
- CVSS 8.4 High
OpenCATS - SQL Injection in DataGrid sortDirection Parameter
- OpenCATS
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
OpenCATS 0.9.4 Remote Code Execution via Resume Upload
- OpenCATS
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
OpenCATS PHP Code Injection via installer AJAX endpoint
- OpenCATS
- Code injection
- CVSS 5.4 Medium
Cross-site request forgery in OpenCATS
- OpenCATS
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
Cross-site scripting in OpenCATS
- OpenCATS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in OpenCATS
- OpenCATS
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Open redirect in OpenCATS
- OpenCATS
- Open redirect