Ethyca

Fides

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-38537

  • EPSS 1.43%
  • Veröffentlicht 02.07.2024 20:15:05
  • Zuletzt bearbeitet 02.09.2025 20:27:17

Fides is an open-source privacy engineering platform. `fides.js`, a client-side script used to interact with the consent management features of Fides, used the `polyfill.io` domain in a very limited edge case, when it detected a legacy browser such a...

6.5

CVE-2024-35189

Exploit
  • EPSS 0.58%
  • Veröffentlicht 30.05.2024 20:15:09
  • Zuletzt bearbeitet 20.10.2025 17:56:22

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve `ConnectionConfiguration` records and their associated `secrets` which _can_ contain sensitive data (e.g. passwords, private keys, etc.)...

3.3

CVE-2024-34715

Exploit
  • EPSS 0.28%
  • Veröffentlicht 29.05.2024 17:16:20
  • Zuletzt bearbeitet 27.09.2025 00:05:58

Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of application data. If the password used by the webserver for this database connection includes sp...

9.1

CVE-2023-48224

  • EPSS 0.99%
  • Veröffentlicht 15.11.2023 21:15:08
  • Zuletzt bearbeitet 21.11.2024 08:31:14

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides Privacy Center allows data subject users to submit priv...

6.1

CVE-2023-47114

  • EPSS 0.61%
  • Veröffentlicht 08.11.2023 22:15:11
  • Zuletzt bearbeitet 21.11.2024 08:29:48

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code. The Fides web application allows data subject users to re...

5.4

CVE-2023-46126

  • EPSS 0.61%
  • Veröffentlicht 25.10.2023 18:17:36
  • Zuletzt bearbeitet 21.11.2024 08:27:56

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notice...

6.5

CVE-2023-46125

  • EPSS 0.72%
  • Veröffentlicht 25.10.2023 18:17:36
  • Zuletzt bearbeitet 21.11.2024 08:27:55

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows users to retrieve its configuratio...

7.2

CVE-2023-46124

  • EPSS 0.68%
  • Veröffentlicht 25.10.2023 18:17:36
  • Zuletzt bearbeitet 21.11.2024 08:27:55

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. The Fides web application allows a custom integration to be upload...

7.2

CVE-2023-41319

  • EPSS 0.84%
  • Veröffentlicht 06.09.2023 18:15:08
  • Zuletzt bearbeitet 21.11.2024 08:21:03

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows custom integrations to be uploaded...

4.9

CVE-2023-37481

  • EPSS 0.58%
  • Veröffentlicht 18.07.2023 19:15:09
  • Zuletzt bearbeitet 21.11.2024 08:11:48

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit this vulnerability to upload zip fil...