CVE-2023-41363MEDIUM 4.3In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
CVE-2023-28883CRITICAL 9.8In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
CVE-2023-26468CRITICAL 9.1Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
CVE-2022-25321MEDIUM 6.1An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.
CVE-2022-25320MEDIUM 5.3An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.