Skip to content
OpenAdvisories

Package · PyPI

freetakserver-ui

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2022-25512

    Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.

    freetakserver-ui PyPI
  • Medium 6.5
    CVE-2022-25511

    Path traversal in FreeTAKServer-UI

    An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system.

    freetakserver-ui PyPI
  • Medium 6.5
    CVE-2022-25506

    SQL Injection in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.

    freetakserver-ui PyPI
  • Medium 5.4
    CVE-2022-25507

    Cross-site Scripting in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.

    freetakserver-ui PyPI