Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2024-27290

Docassemble HTML and javascript injection

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the master branch.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jhpyle
Products
Docassemble
CVE-2024-27291

Docassemble open redirect

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jhpyle
Products
Docassemble
CVE-2024-27292

Docassemble unauthorized access through URL manipulation

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.

CVSS 3.1 · 7.5 High EPSS 69.5% KEV · Not listed
Vendors
Jhpyle
Products
Docassemble