Filtered by vendor Mind Subscriptions
Filtered by product Imind Server Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-25398 1 Mind 1 Imind Server 2024-08-04 8.8 High
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
CVE-2020-25399 1 Mind 1 Imind Server 2024-08-04 7.8 High
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
CVE-2020-24765 1 Mind 1 Imind Server 2024-08-04 7.5 High
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.