Ethyca Fides vulnerabilities

• ethyca fides Fides: DOM-based XSS vulnerability in fides.js via fides_description override CVE-2026-44541 Fix available 7.0 HighMay 14, 2026
• ethyca fides Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection CVE-2026-42303 Fix available 6.1 MediumMay 5, 2026
• ethyca fides Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation CVE-2025-57817 Fix available 8.6 HighSeptember 8, 2025
• ethyca fides Fides Webserver API Rate Limiting Vulnerability in Proxied Environments CVE-2025-57816 Fix available 6.3 MediumSeptember 8, 2025
• ethyca fides Fides Lacks Brute-Force Protections on Authentication Endpoints CVE-2025-57815 Fix available 1.7 LowSeptember 8, 2025
• ethyca fides Fides's Admin UI User Password Change Does Not Invalidate Current Session CVE-2025-57766 Fix available 1.7 LowSeptember 8, 2025
• ethyca fides Password Policy Bypass Vulnerability in Fides Webserver CVE-2024-52008 Fix available 2.0 LowNovember 26, 2024
• ethyca fides Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine CVE-2024-45053 Fix available 9.1 CriticalSeptember 4, 2024
• ethyca fides Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability CVE-2024-45052 Fix available 5.3 MediumSeptember 4, 2024
• ethyca fides Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL CVE-2024-31223 Fix available 5.3 MediumJuly 3, 2024
• ethyca fides Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js CVE-2024-38537 Public exploitFix available 0.0 NoneJuly 2, 2024
• ethyca fides Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides CVE-2024-35189 Fix available 6.5 MediumMay 30, 2024
• ethyca fides Partial Password Exposure Vulnerability in Fides Webserver Logs CVE-2024-34715 Fix available 2.3 LowMay 29, 2024
• ethyca fides Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides CVE-2023-48224 Fix available 8.2 HighNovember 15, 2023
• ethyca fides Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages CVE-2023-47114 Fix available 4.3 MediumNovember 8, 2023
• ethyca fides Fides JavaScript Injection Vulnerability in Privacy Center URL CVE-2023-46126 Fix available 3.9 LowOctober 24, 2023
• ethyca fides Fides Information Disclosure Vulnerability in Config API Endpoint CVE-2023-46125 Fix available 6.5 MediumOctober 24, 2023
• ethyca fides Server-Side Request Forgery Vulnerability in Custom Integration Upload CVE-2023-46124 Fix available 8.2 HighOctober 24, 2023
• ethyca fides Remote Code Execution in Custom Integration Upload in Fides CVE-2023-41319 Fix available 8.8 HighSeptember 6, 2023
• ethyca fides Fides Webserver Vulnerable to Zip Bomb File Uploads CVE-2023-37480 Fix available 2.7 LowJuly 18, 2023
• ethyca fides Fides Webserver Vulnerable to SVG Bomb File Uploads CVE-2023-37481 Fix available 2.7 LowJuly 18, 2023
• ethyca fides Fides vulnerable to Path Traversal in Webserver API CVE-2023-36827 Fix available 7.5 HighJuly 5, 2023