Skip to content
OpenAdvisories

Package · npm

meshcentral

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 8.3
    GHSA-c7hr-448w-65px

    MeshCentral has unsanitized data fields

    ### Description A rogue or compromised MeshAgent can inject arbitrary HTML/JavaScript via the osdesc (OS description) field in its coreinfo message. The server stores this value with zero HTML sanitization (meshagent.js:1903 only checks typeof == 'string'). W…

    meshcentral npm
  • High 8.4
    CVE-2024-26135

    MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

    MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within the control.ashx endpoint. This component is the primary mechanism used within MeshCentral to perform administrative act…

    Ylianst MeshCentral meshcentral npm
  • High 7.5
    CVE-2023-51838

    Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

    Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

    meshcentral npm
  • Critical 9.8
    CVE-2023-51837

    Ylianst MeshCentral Missing SSL Certificate Validation

    Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

    meshcentral npm
  • High 7.5
    CVE-2023-51842

    MeshCentral algorithm-downgrade issue

    An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.

    meshcentral npm