CWE-1100

Total CVEs
2
Vulnerabilities
Avg CVSS v3
5.4
Medium
Latest CVE
2024
Most Recent

Severity Distribution

Critical 0
0%
High 0
0%
Medium 2
100%
Low 0
0%

External References

All CVEs (2)

Page 1 of 1
CVSS:6.5(Medium)

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the ...

CVSS:4.3(Medium)

In version v0.3.8 of open-webui/open-webui, improper access control vulnerabilities allow an attacker to view any prompts. The application does not verify whether the attacker is an administrator, all...