Known vulnerabilities in FreshTomato
Vendor:
freshtomato.org
Software:
FreshTomato
Software CPE:
cpe:2.3:h:freshtomato.org:freshtomato:*:*:*:*:*:*:*:*
Website:
https://www.freshtomato.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71729 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-42484 |
CWE-78 | Low | 2022.6 | 01.02.2023 |
SB2023020123 SB2023020124 |
||
| #VU71728 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-38451 |
CWE-22 | Low | 2022.6 | 01.02.2023 |
SB2023020123 SB2023020124 |
||
| #VU65840 - Out-of-bounds write CVE-2022-28665 |
CWE-787 | High | 2022.2 | 28.07.2022 |
SB2022072809 |
||
| #VU65839 - Out-of-bounds write CVE-2022-28664 |
CWE-787 | High | 2022.2 | 28.07.2022 |
SB2022072809 |