Skip to content
Cerebrate-project vulnerabilities
Newest
-
cerebrate
Cerebrate self-registration password hash exposure via inbox and audit log views
CVE-2026-53912
5.1 Medium
-
cerebrate
Cerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated records
CVE-2026-53911
6.3 Medium
-
cerebrate
Cerebrate before v1.37 allows mass assignment of record identifiers during object creation
CVE-2026-53901
8.7 High
-
cerebrate-project cerebrate
UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to...
CVE-2025-66385
9.4 Critical
-
cerebrate-project cerebrate
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
CVE-2023-41908
5.3 Medium
-
cerebrate-project cerebrate
In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change...
CVE-2023-41363
4.3 Medium
-
cerebrate-project cerebrate
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
CVE-2023-28883
9.8 Critical
-
cerebrate-project cerebrate
Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
CVE-2023-26468
9.1 Critical
-
cerebrate-project cerebrate
An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
CVE-2022-25321
6.1 Medium
-
cerebrate-project cerebrate
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
CVE-2022-25320
5.3 Medium
-
cerebrate-project cerebrate
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
CVE-2022-25319
5.3 Medium
-
cerebrate-project cerebrate
An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an...
CVE-2022-25318
4.3 Medium
-
cerebrate-project cerebrate
An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form...
CVE-2022-25317
6.1 Medium