Approved changes feed: RSS · Atom
cpe:2.3:a:cachethq:cachet:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cachethq (4b651704-a617-50cd-82fa-cc5976492623) |
|---|---|
| Product | Cachet (a8a55ce5-43de-5546-a16f-08ca0768ed29) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113712 |
vulnerable | 2026-11-03 10:16:27.381499 |
Cachet has Stored XSS in Incident Component
Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover. Commits 57b44a8bac0b250b0d5751e93e0349070d14606e and 23adbb88ffa819f92be4a905ff1d812670d980a2 in `cachethq/core` patch the issue.
Published: 2026-10-20T19:14:02.289Z
Updated: 2026-10-23T02:00:37.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-69118 |
vulnerable | 2026-09-16 04:34:19.842784 |
Cachet 2.4.1 Authenticated Server-Side Template Injection RCE
HIGH (8.8)
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when incidents are created, achieving remote code execution as the web server process.
Published: 2026-08-10T19:42:32.749Z
Updated: 2026-11-08T14:08:23.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43661 |
vulnerable | 2026-06-08 06:12:37.679573 |
Cachet vulnerable to Authenticated Remote Code Execution
CRITICAL (9.1)
Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.
Published: 2023-10-11T19:56:18.447Z
Updated: 2026-10-20T18:55:57.760Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.