Sismics Teedy vulnerabilities

• sismics teedy Sismics Teedy API Endpoint file access control CVE-2025-11853 5.3 MediumOctober 16, 2025
• sismics teedy When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of... CVE-2024-54852 9.8 CriticalJanuary 29, 2025
• sismics teedy Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF... CVE-2024-54851 8.8 HighJanuary 29, 2025
• sismics teedy Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin. CVE-2025-22963 Public exploit 7.5 HighJanuary 13, 2025
• sismics teedy Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. CVE-2024-46278 Public exploit 8.4 HighOctober 7, 2024
• sismics teedy Teedy v1.11 - Stored cross-site scripting (XSS) CVE-2023-4892 5.7 MediumSeptember 25, 2023
• sismics teedy, docs +1 more Teedy - Stored Cross-Site Scripting (XSS) in Tag Name CVE-2022-22115 9.0 CriticalJanuary 10, 2022
• sismics teedy, docs +1 more Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality CVE-2022-22114 9.6 CriticalJanuary 10, 2022