Skip to contentCerebrate-project Cerebrate vulnerabilities
- cerebrateCerebrate self-registration password hash exposure via inbox and audit log viewsCVE-2026-539125.1 Medium
- cerebrateCerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated recordsCVE-2026-539116.3 Medium
- cerebrateCerebrate before v1.37 allows mass assignment of record identifiers during object creationCVE-2026-539018.7 High
- cerebrate-project cerebrateUsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to...CVE-2025-663859.4 Critical
- cerebrate-project cerebrateCerebrate before 1.15 lacks the Secure attribute for the session cookie.CVE-2023-419085.3 Medium
- cerebrate-project cerebrateIn Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change...CVE-2023-413634.3 Medium
- cerebrate-project cerebrateIn Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.CVE-2023-288839.8 Critical
- cerebrate-project cerebrateCerebrate 1.12 does not properly consider organisation_id during creation of API keys.CVE-2023-264689.1 Critical
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.CVE-2022-253216.1 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. Username enumeration could occur.CVE-2022-253205.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.CVE-2022-253195.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an...CVE-2022-253184.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form...CVE-2022-253176.1 Medium