Advisories · Technology
Unblu inc. Unblu Spark.
Every CVE that names Unblu inc. Unblu Spark among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Unblu Spark Cross-Site Scripting in Embedded Co-Browsing
- Unblu inc. Unblu Spark
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Unblu Spark Authorization Bypass in Configuration Cascade Operations
- Unblu inc. Unblu Spark
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Unblu Spark Open Redirect leading to DOM-Based XSS
- Unblu inc. Unblu Spark
- Cross-site scripting (XSS)
- Open redirect
- CVSS 7.0 High
Replace uploaded files knowing the file upload ID
- Unblu inc. Unblu Spark
- Broken access control
- CVSS 5.3 Medium
File upload functionality possible even when disabled
- Unblu inc. Unblu Spark
- Broken access control