Freshdns Project Freshdns — known CVE vulnerabilities

Every CVE whose affected-product data names Freshdns Project Freshdns, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-1000846 — CVSS 8.8 (high): FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API calls in index.php…
• CVE-2018-1000847 — CVSS 5.4 (medium): FreshDNS version 1.0.3 and prior contains a Cross Site Scripting (XSS) vulnerability in Account data form; Zone editor that can result in…