Approved changes feed: RSS · Atom
cpe:2.3:a:mist:mist:*:*:*:*:community:*:*:*
part: a version: * update: *
| Vendor | Mist (c17bbfc0-ba65-50fb-a74b-c58b083ef8ee) |
|---|---|
| Product | Mist (84e26cc7-c528-5a1c-a00d-28a51112d7be) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5412 |
vulnerable | 2026-06-08 07:37:24.236440 |
Mist Community Edition Authentication Endpoint views.py login cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file src/mist/api/views.py of the component Authentication Endpoint. The manipulation of the argument return_to leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The name of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component.
Published: 2025-06-01T23:31:05.448Z
Updated: 2025-06-02T03:33:00.189Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5411 |
vulnerable | 2026-06-08 07:37:24.235890 |
Mist Community Edition views.py tag_resources cross site scripting
LOW (3.5)
A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file src/mist/api/tag/views.py. The manipulation of the argument tag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is named db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component.
Published: 2025-06-01T23:00:19.416Z
Updated: 2025-06-02T03:34:23.365Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5410 |
vulnerable | 2026-06-08 07:37:24.235315 |
Mist Community Edition middleware.py session_start_response cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_response of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is identified as db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component.
Published: 2025-06-01T22:31:05.433Z
Updated: 2025-06-02T03:36:20.446Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5409 |
vulnerable | 2026-06-08 07:37:24.234756 |
Mist Community Edition API Token views.py create_token access control
HIGH (7.3)
A vulnerability was found in Mist Community Edition up to 4.7.1. It has been classified as critical. This affects the function create_token of the file src/mist/api/auth/views.py of the component API Token Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The identifier of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component.
Published: 2025-06-01T22:00:16.052Z
Updated: 2025-06-02T03:38:52.683Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.