Projectsend
Security incidents tagged Projectsend. Newest first.
0 Projectsend incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 688
- Longest quiet run: 688 days (Dec 4–Oct 22)
Show 1 older incident1 older incident
November 2024 1
CriticalProjectSend Improper AuthenticationPatched
ProjectSend Patched
ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized modification of the application's configuration via crafted HTTP requests to options.php. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript. Added to the CISA KEV catalog on 2024-12-03.
Open incident →CVE-2024-11680
