Simple-log Project Simple-log — known CVE vulnerabilities

Every CVE whose affected-product data names Simple-log Project Simple-log, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-18264 — CVSS 8.8 (high): Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component…
• CVE-2020-18265 — CVSS 8.8 (high): Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component…