📦 Gestioip

by Gestioip

🔍 What is Gestioip?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-48760

CRITICAL CVSS 9.8 Jan 14, 2025

CVE-2024-48760 is a critical remote code execution vulnerability in GestioIP v3.5.7 that allows attackers to upload malicious files and overwrite legitimate CGI scripts. This enables complete system c...

CVE-2024-50858

HIGH CVSS 8.8 Jan 14, 2025

GestioIP v3.5.7 contains CSRF vulnerabilities in multiple endpoints that allow attackers to trick authenticated administrators into performing unauthorized actions. This can lead to data modification,...

CVE-2024-50859

MEDIUM CVSS 4.8 Jan 14, 2025

This vulnerability allows attackers to execute malicious JavaScript in victims' browsers when they upload improperly formatted CSV files to GestioIP's ip_import_acl_csv endpoint. The vulnerability aff...