CVE-2026-54217mediumCWE-20

CVE-2026-54217: falha de média gravidade em Tobit Laboratories AG TeamDavid

TeamDavid: Stored XSS in web application

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TeamDavid

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.4%
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid before Rollout 528. Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Tobit Laboratories AG · TeamDavid
CVEs relacionadas — Tobit Laboratories AG TeamDavid

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54213CRITICALTeamDavid: Denial of Service via endpoint 'internalRestart'EPSS 0.7%CVE-2026-54212CRITICALTeamDavid: Buffer Overflow in JSON-parsingEPSS 0.7%CVE-2026-54210CRITICALTeamDavid: Buffer Overflow in file names of file upload functionalitiesEPSS 0.7%CVE-2026-54211CRITICALTeamDavid: Buffer Overflow in multiple form data parametersEPSS 0.6%CVE-2026-54204HIGHTeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionalityEPSS 0.6%CVE-2026-54201MEDIUMTeamDavid: Missing AuthorizationEPSS 0.6%