5 results · Clear filters · Feed
-
Medium 5.4
OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and Preview
OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts by uploading attachments with spoofed text/html Content-Type. Attackers can upload HTML files named like test.html.pdf that r…
-
Medium 5.3
OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comme…
-
Medium 5.0
OpsTree REMS through 1.0.0 SSRF via Database Test Connection
OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated users to make the backend connect to arbitrary destinations through the database Test Connection feature. Attackers can set a database entry's host and p…
-
Medium 4.3
OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidents
OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted POST /api/v1/incidents or PAT…
-
Medium 4.3
OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and r…