Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-62368 1 Taiga 1 Taiga 2025-10-29 9.1 Critical
Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.
CVE-2025-62367 1 Taiga 1 Taiga 2025-10-29 4.8 Medium
Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.
CVE-2024-53556 1 Taiga 1 Taiga 2024-11-27 6.1 Medium
An Open Redirect vulnerability in Taiga v6.8.1 allows attackers to redirect users to arbitrary websites via appending a crafted link to /login?next= in the login page URL.