Skip to content

Vendor

attic project vulnerabilities

1 published CVE affecting attic project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of attic project alerts

Products

Latest attic project CVEs

Newest publication first

  1. CVE-2015-4082 attic has improper verification of unencrypted backups

    Published
    MediumCVSS 6.5 EPSS 2.5%

    attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to "unencrypted / witho...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.