Approved changes feed: RSS · Atom
cpe:2.3:a:census:csweb:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Census (70f033f7-fa25-5c83-987e-d10b4aad8520) |
|---|---|
| Product | Csweb (34900399-564d-5184-94ed-7863cdfc96ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-60949 |
vulnerable | 2026-06-08 07:37:27.425658 |
Census CSWeb leaked configuration files
CRITICAL (9.1)
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:55.751Z
Updated: 2026-03-25T14:50:13.877Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60948 |
vulnerable | 2026-06-08 07:37:27.425314 |
Census CSWeb stored XSS
MEDIUM (4.6)
Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:28.330Z
Updated: 2026-03-25T14:47:20.070Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60947 |
vulnerable | 2026-06-08 07:37:27.424938 |
Census CSWeb arbitrary file upload
HIGH (8.8)
Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:04.088Z
Updated: 2026-03-25T14:38:12.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60946 |
vulnerable | 2026-06-08 07:37:27.423599 |
Census CSWeb path traversal
HIGH (8.8)
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Published: 2026-03-23T20:59:28.541Z
Updated: 2026-03-25T14:34:38.740Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.