zongdeiqianxing/rengine

Releases0

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-36566NVD↗	= 1.3.0	Aug 31, 2022Wednesday, 31 August 2022, 18:15	9.8 CRITICAL	—
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
CVE-2022-1813NVD↗	< 1.2.0	May 22, 2022Sunday, 22 May 2022, 16:15	9.8 CRITICAL	7.5 HIGH
OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.
CVE-2022-28995NVD↗	= 1.0.2	May 20, 2022Friday, 20 May 2022, 19:15	9.8 CRITICAL	7.5 HIGH
Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.
CVE-2021-39491NVD↗	< 1.0.1	Mar 24, 2022Thursday, 24 March 2022, 15:15	5.4 MEDIUM	3.5 LOW
A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box . .
CVE-2021-38606NVD↗	= *, <= 0.5	Aug 12, 2021Thursday, 12 August 2021, 16:15	9.8 CRITICAL	7.5 HIGH
reNgine through 0.5 relies on a predictable directory name.