ledgersmb

Products

ProductCVEsExploitedLatest
ledgersmb/ledgersmb4–Oct 14, 2021
LedgerSMB1–Feb 2, 2024

Exploited and recent CVEs

  • CVE-2024-23831 High 7.5 Privilege escalation through CSRF attack on 'setup.pl' 0.3%
  • CVE-2021-3882 Medium 5.9 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb 1.1%
  • CVE-2021-3731 Medium 5.9 Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb 1.2%
  • CVE-2021-3694 High 8.2 Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb 2.5%
  • CVE-2021-3693 High 8.8 Cross-site Scripting (XSS) - DOM in ledgersmb/ledgersmb 3.2%