This page aggregates publicly disclosed CVE and security risk information related to opengoofy, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2023-27096 | Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module. | [email protected] | 6.5 | 0.16% | 2023-03-27 | 2024-11-21 |
| CVE-2023-27094 | An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module. | [email protected] | 8.8 | 0.34% | 2023-03-23 | 2025-02-26 |
| CVE-2023-27095 | Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module. | [email protected] | 6.5 | 0.21% | 2023-03-16 | 2025-02-26 |