Lenosp Project Lenosp — known CVE vulnerabilities

Every CVE whose affected-product data names Lenosp Project Lenosp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-42180 — CVSS 8.8 (high): An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a…
• CVE-2023-42178 — CVSS 6.5 (medium): Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module.