Skip to content

Product

Temporal Technologies, Inc. Temporal Server vulnerabilities

2 published CVES affecting Temporal Technologies, Inc. Temporal Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest Temporal Technologies, Inc. Temporal Server CVEs

Newest publication first

  1. CVE-2024-2689 Denial of Service if invalid UTF-8 sent

    Published
    MediumCVSS 4.4 EPSS 0.49%

    Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task contai...

  2. CVE-2023-3485 Insecure Default Authorization in Temporal Server

    Published
    LowCVSS 3.6 EPSS 0.17%

    Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server fl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.