Skip to content
OpenAdvisories

Product · Census

CSWeb

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Census CSWeb leaked configuration files

    Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.