Fsmlabs Timekeeper vulnerabilities
2 known vulnerabilities affecting fsmlabs/timekeeper.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-31465P1CRITICALCVSS 9.8ExploitedPoC≥ 8.0.17, ≤ 8.0.282023-07-26
CVE-2023-31465 [CRITICAL] CVE-2023-31465: An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from v
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named arg[x], with x an integer starting from 1; it is possible to modify arg[2] to insert Bash code that will be executed
nvd
CVE-2023-31466P4MEDIUMCVSS 5.4≥ 8.0.17, ≤ 8.0.272023-07-26
CVE-2023-31466 [MEDIUM] CWE-79 CVE-2023-31466: An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration -> Compliance -> Add
An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration -> Compliance -> Add a new compliance report" and "Configuration -> Timekeeper Configuration -> Add a new source there" screens, there are entry points to inject JavaScript code.
nvd