Skip to content
OpenAdvisories

Package · PyPI

freetakserver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-25510

    Hard coded credentials in FreeTAKServer

    FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

    freetakserver PyPI
  • High 7.5
    CVE-2022-25508

    Improper Authentication in FreeTAKServer

    An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users.

    freetakserver PyPI