Advisories · Technology
siga.
Every CVE that names siga among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization
- siga
- Broken access control
- CVSS 6.9 Medium
projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery
- siga
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
projeto-siga novo cross site scripting
- siga
- Cross-site scripting (XSS)
- Code injection