Skip to main content

Vendor/product archive

mind / imind_server CVEs

Beta · best-effort

3 CVEs tagged to mind / imind_server0 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2020-25399

Published Nov 5, 2020

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-25398

Published Nov 5, 2020

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-24765

Published Oct 20, 2020

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-inf…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1