Skip to content
OpenAdvisories

Package · PyPI

freetakserver-ui

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-25511

    Path traversal in FreeTAKServer-UI

    An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system.

    freetakserver-ui PyPI
  • Medium 6.5
    CVE-2022-25506

    SQL Injection in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.

    freetakserver-ui PyPI
  • Medium 5.4
    CVE-2022-25507

    Cross-site Scripting in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.

    freetakserver-ui PyPI