Kareadita Vulnerabilities and Affected Products
Vulnerabilities associated with kareadita/kavita.
Products
Clear product- kareadita/kavita4 vulnerabilities
- Kavita4 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-0919HIGH | Missing Authentication for Critical Function in kareadita/kavitaMissing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0. CWE-306Feb 19, 2023 | CVSS8.1v3.1 | EPSS0.484% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3993CRITICAL | Improper Restriction of Excessive Authentication Attempts in kareadita/kavitaImproper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. | CVSS9.4v3.1 | EPSS1.05% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3945MEDIUM | Improper Restriction of Excessive Authentication Attempts in kareadita/kavitaImproper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. CWE-307Nov 11, 2022 | CVSS5.3v3.1 | EPSS0.9% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2756MEDIUM | Server-Side Request Forgery (SSRF) in kareadita/kavitaServer-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1. | CVSS6.5v3.1 | EPSS3.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |