Approved changes feed: RSS · Atom
cpe:2.3:a:remram44:taguette:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Remram44 (039b15ce-f602-5df4-aa35-4798b02ee09e) |
|---|---|
| Product | Taguette (094417ec-7f07-57ca-aa0f-35da992dc71b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67502 |
vulnerable | 2026-06-08 07:41:19.912509 |
Taguette does not safeguard against Open Redirect
MEDIUM (5.4)
Taguette is an open source qualitative research tool. In versions 1.5.1 and below, attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next parameter and uses it directly in HTTP redirects without any validation. This can be exploited for phishing attacks where victims believe they are interacting with a trusted Taguette instance but are redirected to a malicious site designed to steal credentials or deliver malware. This issue is fixed in version 1.5.2.
Published: 2025-12-09T23:53:39.474Z
Updated: 2025-12-10T15:38:54.717Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62528 |
vulnerable | 2026-06-08 07:37:29.898178 |
Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description
MEDIUM (5.4)
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0.
Published: 2025-10-20T20:03:33.177Z
Updated: 2025-10-20T20:18:54.054Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62527 |
vulnerable | 2026-06-08 07:37:29.896950 |
Taguette vulnerable to password reset link poisoning
HIGH (7.1)
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.
Published: 2025-10-20T20:03:29.405Z
Updated: 2025-10-20T20:18:18.800Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.