ethyca-fides has 22 CVEs on record between 2023 and 2026. The median CVSS is 6.5 (medium), with 1 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 2
Products
- ethyca-fides 22
Worst active — by depth score
CVE-2024-45053Critical· 9.1Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine50CVE-2023-41319High· 8.8Remote Code Execution in Custom Integration Upload49CVE-2023-48224High· 8.2Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification45CVE-2023-46124High· 8.2Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload45CVE-2023-36827High· 7.5ethyca-fides Webserver API Path Traversal vulnerability42
ethyca-fides vulnerabilities
CVEs affecting ethyca-fides, newest first. Open any entry for full detail, references, and exploit status.
22 CVEsRSS
CVE-2026-44541Highethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
CVE-2026-42303MediumEthyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
CVE-2025-57766Medium· 4.8Fides' Admin UI User Password Change Does Not Invalidate Current Session
Fides' Admin UI User Password Change Does Not Invalidate Current Session
CVE-2025-57817High· 7.2Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
CVE-2025-57816High· 7.5Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
CVE-2025-57815Medium· 6.5Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
CVE-2024-52008Medium· 5.7Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
CVE-2024-45053Critical· 9.1Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
CVE-2024-45052LowTiming-Based Username Enumeration Vulnerability in Fides Webserver Authentication
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
CVE-2024-31223Medium· 5.3PoCInformation Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
CVE-2024-38537None· 0.0PoCInclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
CVE-2024-35189Medium· 6.5Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
CVE-2024-34715Low· 2.3Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
CVE-2023-48224High· 8.2Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
CVE-2023-47114Medium· 4.3Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
CVE-2023-46125Medium· 6.5Fides Information Disclosure Vulnerability in Config API Endpoint
Fides Information Disclosure Vulnerability in Config API Endpoint
CVE-2023-46124High· 8.2Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
CVE-2023-46126Low· 3.9Fides JavaScript Injection Vulnerability in Privacy Center URL
Fides JavaScript Injection Vulnerability in Privacy Center URL
CVE-2023-41319High· 8.8Remote Code Execution in Custom Integration Upload
Remote Code Execution in Custom Integration Upload
CVE-2023-37480Low· 2.7Fides Webserver Vulnerable to Zip Bomb File Uploads
Fides Webserver Vulnerable to Zip Bomb File Uploads
CVE-2023-37481Low· 2.7Fides Webserver Vulnerable to SVG Bomb File Uploads
Fides Webserver Vulnerable to SVG Bomb File Uploads
CVE-2023-36827High· 7.5ethyca-fides Webserver API Path Traversal vulnerability
ethyca-fides Webserver API Path Traversal vulnerability