CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form...
CVE-2026-108705
CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint tha
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题eladmin through commit 55fbf70 contains a missing authorization vulnerability in the...
CVE-2026-108706
eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allo
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged...
CVE-2026-108704
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to
CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that...
CVE-2026-108696
CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated c
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource...
CVE-2026-108703
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authe
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval...
CVE-2026-108702
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowin
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated...
CVE-2026-108690
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other sh
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated...
CVE-2026-108691
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to de
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows...
CVE-2026-108689
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController...
CVE-2026-108688
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108673
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108676
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108675
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController...
CVE-2026-108674
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles...
CVE-2026-108678
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108680
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement...
CVE-2026-108679
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment...
CVE-2026-108670
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch...
CVE-2026-108669
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords...
CVE-2026-108672
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration