Citadela Directory

Citadela Directory has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 2 issues recorded for Citadela Directory has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Dave Jong.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Citadela Directory vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-32086

Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure

Read the full analysis

Vulnerability Records

2 records


2024-04-11 00:00	Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure Citadela Directory <= 5.18.1	`CVE-2024-32086`	7.5 High	Dave Jong	Yes
2024-04-11 00:00	Citadela Listing < 5.20.0 - Cross-Site Request Forgery Citadela Directory < 5.20.0	`CVE-2024-32085`	4.3 Medium	Dave Jong	Yes

Showing 1–2 of 2 reports