VendorsOWASPdefectdojoany version
Vulnerabilities

OWASP DefectDojo any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-48171
An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.
Published 2024-08-12 · Analyzed
8.8EPSS 0.006
CVE-2026-3816
OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service
Published 2026-03-09 · Analyzed
6.5EPSS 0.007