Selenium - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2023-10-15.

Products

• Selenium Grid - 3 CVEs
• Selenium - 1 CVEs

Newest CVEs of Selenium

• CVE-2023-5590 - CVSS 7.5 (high), 2023-10-15: NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
• CVE-2020-23452 - CVSS 6.1 (medium), 2023-07-05: A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…
• CVE-2022-28108 - CVSS 8.8 (high), 2022-04-19: Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and…
• CVE-2022-28109 - CVSS 8.8 (high), 2022-04-15: Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The impact is: execute arbitrary code…