Vulnerabilities in THM-Health

5 results

CVE-2023-47107HIGHPILOS account takeover through password reset poisoningEPSS 0.6%CVE-2025-62524MEDIUMPILOS Exposes PHP versionEPSS 0.2%CVE-2025-62523MEDIUMPILOS Misconfigured the Access-Control-Allow-Origin HeaderEPSS 0.2%CVE-2025-62781MEDIUMPILOS is missing session regeneration after password changeEPSS 0.2%CVE-2026-22800LOWPILOS affected by a CSRF via GET request allows unintentional termination of all active video conferencesEPSS 0.1%