Rukovoditel 2.4.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rukovoditel:rukovoditel:2.4.1:*:*:*:*:*:*:*

part: a version: 2.4.1 update: *

VendorRukovoditel (43cc348a-3cf0-589d-a12c-52976d3ecadc)
ProductRukovoditel (af15ae84-bbc3-5b06-ab63-db60a3460443)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/filipmil/rukovoditel purl2cpe 2026-06-01 10:13:47.284413
pkg:github/rukovoditel/rukovoditel purl2cpe 2026-06-01 10:13:47.284415
pkg:sourceforge/rukovoditel purl2cpe 2026-06-01 10:13:47.284416

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18470 vulnerable 2026-06-08 05:20:57.007735 Details available
Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to rukovoditel_2.4.1/install/index.php.
Published: 2021-08-26T17:28:46.000Z
Updated: 2024-08-04T14:00:49.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18469 vulnerable 2026-06-08 05:20:57.007312 Details available
Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the Application page under the Configuration menu in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to /rukovoditel_2.4.1/index.php?module=configuration/save&redirect_to=configuration/application.
Published: 2021-08-26T17:28:45.000Z
Updated: 2024-08-04T14:00:49.285Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.