Skip to content
OpenAdvisories

Vendor

kiwitcms

14 known vulnerabilities.

Products

Kiwi 13 kiwitcms/kiwi 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-54724

    Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint

    Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter, allowing an unauthenticated attacker to create a URL on a trusted Kiwi TCMS hostname that redirects a victim to an arb…

    kiwitcms Kiwi kiwitcms PyPI
  • Medium 6.5
    CVE-2023-22451

    Weak password requirements in Kiwi TCMS

    Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no validation in place which would prevent them from picking an easy to guess password. This issue is resolved by…

    kiwitcms Kiwi