Skip to content
OpenAdvisories

Vendor

Patrowl

4 known vulnerabilities.

Products

PatrowlManager 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-92753

    PatrowlManager through 1.8.4 Authorization Bypass via Events API

    PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to …

    Patrowl PatrowlManager
  • High 7.4
    CVE-2021-43829 EPSS 59%

    Unrestricted Upload of Files in Patrowl

    PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangerous type of file to s…

    Patrowl PatrowlManager
  • High 7.5
    CVE-2021-43828

    Improper Privilege Management in Patrowl

    PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management (IDOR) has been found in PatrowlManager. All imports findings file is placed under /media/imports/<owner_id>/<tmp_file…

    Patrowl PatrowlManager