Advisories · Technology
orionsec orion-ops.
Every CVE that names orionsec orion-ops among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery
- orionsec orion-ops
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
orionsec orion-ops User Profile UserController.java update improper authorization
- orionsec orion-ops
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization
- orionsec orion-ops
- Privilege escalation
- Broken access control