Ethyca / Fides
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-44541 | Fides: DOM-based XSS vulnerability in fides.js via fides_description override | HIGH | 7.0 | Jun 8, 2026 |
| CVE-2026-42303 | Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection | MEDIUM | 6.1 | May 12, 2026 |
| CVE-2025-57817 | Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation | HIGH | 8.6 | Sep 8, 2025 |
| CVE-2025-57816 | Fides Webserver API Rate Limiting Vulnerability in Proxied Environments | MEDIUM | 6.3 | Sep 8, 2025 |
| CVE-2025-57766 | Fides's Admin UI User Password Change Does Not Invalidate Current Session | LOW | 1.7 | Sep 8, 2025 |
| CVE-2025-57815 | Fides Lacks Brute-Force Protections on Authentication Endpoints | LOW | 2.3 | Sep 8, 2025 |
| CVE-2024-52008 | Password Policy Bypass Vulnerability in Fides Webserver | LOW | 2.0 | Nov 26, 2024 |
| CVE-2024-45053 | Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine | HIGH | 8.6 | Sep 4, 2024 |
| CVE-2024-45052 | Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability | MEDIUM | 5.3 | Sep 4, 2024 |
| CVE-2024-31223 | Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL | MEDIUM | 5.3 | Jul 3, 2024 |
| CVE-2024-38537 | Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js | CRITICAL | 9.8 | Jul 2, 2024 |
| CVE-2024-35189 | Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides | MEDIUM | 6.5 | May 30, 2024 |
| CVE-2024-34715 | Partial Password Exposure Vulnerability in Fides Webserver Logs | LOW | 3.3 | May 29, 2024 |
| CVE-2023-48224 | Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides | CRITICAL | 9.1 | Nov 15, 2023 |
| CVE-2023-47114 | Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages | MEDIUM | 6.1 | Nov 8, 2023 |
| CVE-2023-46124 | Server-Side Request Forgery Vulnerability in Custom Integration Upload | HIGH | 8.2 | Oct 24, 2023 |
| CVE-2023-46125 | Fides Information Disclosure Vulnerability in Config API Endpoint | MEDIUM | 6.5 | Oct 24, 2023 |
| CVE-2023-46126 | Fides JavaScript Injection Vulnerability in Privacy Center URL | MEDIUM | 5.4 | Oct 24, 2023 |
| CVE-2023-41319 | Remote Code Execution in Custom Integration Upload in Fides | HIGH | 8.8 | Sep 6, 2023 |
| CVE-2023-37480 | Fides Webserver Vulnerable to Zip Bomb File Uploads | MEDIUM | 4.9 | Jul 18, 2023 |
| CVE-2023-37481 | Fides Webserver Vulnerable to SVG Bomb File Uploads | MEDIUM | 4.9 | Jul 18, 2023 |
| CVE-2023-36827 | Fides vulnerable to Path Traversal in Webserver API | HIGH | 7.5 | Jul 5, 2023 |
Showing 1 to 22 of 22 CVEs