csprousers/csweb

csprousers/csweb

Releases2

Frequency1 year 3 months

Last Release 23 days ago

Stars1

Web application that allows users to securely transfer cases or files between client devices and a web server.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-60949 ↗	Mar 23, 2026Monday, 23 March 2026, 22:16	9.1 CRITICAL	—
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.
CVE-2025-60946 ↗	Mar 23, 2026Monday, 23 March 2026, 22:16	8.8 HIGH	—
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
CVE-2025-60947 ↗	Mar 23, 2026Monday, 23 March 2026, 22:16	8.8 HIGH	—
Census CSWeb 8.0.1 allows arbitrary file upload. A remote, authenticated attacker could upload a malicious file, possibly leading to remote code execution. Fixed in 8.1.0 alpha.
CVE-2025-60948 ↗	Mar 23, 2026Monday, 23 March 2026, 22:16	4.6 MEDIUM	—
Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields. A remote, authenticated attacker could store malicious javascript that executes in a victim's browser. Fixed in 8.1.0 alpha.