Vulnerabilidades do Composer Cachethq/cachet
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Composer Cachethq/cachet: 2 registro(s), com versões afetadas e correções.
CVE-2026-113712
Média · 4.8
CWE-79 20/10/2026
Cachet has Stored XSS in Incident Component
Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover. Commits 57b44a8bac0b250b0d5751e93e0349070d14606e and 23adbb88ffa819f92be4a905ff1d812670d980a2 in `cachethq/core` patch the issue.
CVE-2023-43661
Alta · 8.8
CWE-74 11/10/2023
Cachet vulnerable to Authenticated Remote Code Execution
Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.