boodskap vulnerabilities

Products

• iot platform 3
• growchain 1

Latest boodskap CVEs

Newest publication first

1. CVE-2022-35135 Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.

   Published 2022-10-13

   High·CVSS 8.8 EPSS 0.95%

   Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.

2. CVE-2022-35134 Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

   Published 2022-10-13

   Medium·CVSS 5.4 EPSS 0.54%

   Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

3. CVE-2022-35136 Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

   Published 2022-10-13

   Medium·CVSS 6.5 EPSS 0.72%

   Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

4. CVE-2018-13325 The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.

   Published 2018-07-05

   High·CVSS 7.5 EPSS 0.94%

   The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.