Skip to content
OpenAdvisories

Product · thinkst

canarytokens

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-41664

    Blind SSRF via Canarytoken Webhook

    Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulnerable to a blind SSRF in the Webhook alert feature. When a Canarytoken is created, users choose to receive alerts either via email or via a webhook. I…

    thinkst canarytokens
  • Medium 6.5
    CVE-2024-28111

    CSV Injection in exported history CSV files

    Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by …

    thinkst canarytokens
  • Medium 6.3
    CVE-2023-22475

    Cross-Site Scripting in Canarytoken history

    Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulnerability was identified in the history page of triggered Canarytokens prior to sha-fb61290. An attacker who discovers an HTTP-based Canaryt…

    thinkst canarytokens
  • Medium 6.3
    CVE-2022-31113

    Cross-Site Scripting in Canarytoken history

    Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulnerability was identified in the history page of triggered Canarytokens. This permits an attacker who recognised an HTTP-based Canarytoken (a…

    thinkst canarytokens