Approved changes feed: RSS · Atom
cpe:2.3:a:csprousers:csweb:8.0.1:*:*:*:*:*:*:*part: a version: 8.0.1 update: *
| Vendor | Csprousers (7586397f-40dc-5e5c-aaf0-43ee7e87ec0a) |
|---|---|
| Product | Csweb (e40216f6-e75f-5302-93c5-6687a3fe5386) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/csprousers/csweb |
purl2cpe | 2026-07-28 16:41:06.588114 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-60949 |
vulnerable | 2026-06-08 07:37:27.425816 |
Census CSWeb leaked configuration files
CRITICAL (9.1)
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:55.751Z
Updated: 2026-03-25T14:50:13.877Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60948 |
vulnerable | 2026-06-08 07:37:27.425347 |
Census CSWeb stored XSS
MEDIUM (4.6)
Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:28.330Z
Updated: 2026-03-25T14:47:20.070Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60947 |
vulnerable | 2026-06-08 07:37:27.424981 |
Census CSWeb arbitrary file upload
HIGH (8.8)
Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.
Published: 2026-03-23T21:00:04.088Z
Updated: 2026-03-25T14:38:12.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60946 |
vulnerable | 2026-06-08 07:37:27.424531 |
Census CSWeb path traversal
HIGH (8.8)
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Published: 2026-03-23T20:59:28.541Z
Updated: 2026-03-25T14:34:38.740Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.