Zimaspace

Zimaos

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-48931

Exploit
  • EPSS 0.4%
  • Published 24.10.2024 21:15:14
  • Last modified 06.11.2024 15:46:23

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint `http://<Zima_Server_IP:PORT>/v3/file?token=<token>&files=<file_path>` is vulnerable to ar...

5.3

CVE-2024-48932

Exploit
  • EPSS 0.18%
  • Published 24.10.2024 21:15:14
  • Last modified 06.11.2024 15:25:41

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoint `http://<Server-ip>/v1/users/name` allows unauthenticated users to access sensitive information, ...