Raneto
Raneto Project · 3 CVEs
CVE-2022-35142
HIGH
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the…
Aug 4, 2022
CVE-2022-35143
CRITICAL
Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-forc…
Aug 4, 2022
CVE-2022-35144
MEDIUM
Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
Aug 4, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-35142 | An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter. | HIGH | 1.55% | Aug 4, 2022 |
| CVE-2022-35143 | Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks. | CRITICAL | 1.66% | Aug 4, 2022 |
| CVE-2022-35144 | Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. | MEDIUM | 0.91% | Aug 4, 2022 |
Showing 1 to 3 of 3 CVEs