Known Vulnerabilities for Indico by Cern
Listed below are 2 of the newest known vulnerabilities associated with "Indico" by "Cern".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-37901 json | Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerability in... | 5.4 - MEDIUM | 2023-07-21 | 2023-07-31 |
| CVE-2021-30185 json | CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. | 7.5 - HIGH | 2021-04-07 | 2021-04-15 |