TI-2024-02638 CVE-2024-2828 · GHSA-33pg-fqx9-9w66
lakernote EasyAdmin IndexController.java thumbnail server-side request forgery
Priority HIGH 71
A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315.
lakernote
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
lakernote records in CISA KEVNo lakernote vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Easyadmin · all components
TI-2024-02637 CVE-2024-2827 · GHSA-c5xg-3jcm-r48j
lakernote EasyAdmin saveReportFile server-side request forgery
Priority HIGH 71
A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315.
TI-2024-02636 CVE-2024-2826 · GHSA-w35x-898h-qg79
lakernote EasyAdmin saveReportFile xml external entity reference
Priority LOW 39
A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315.
TI-2024-02635 CVE-2024-2825 · GHSA-cfpx-f979-xm8v
lakernote EasyAdmin saveReportFile path traversal
Priority LOW 39
A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315.
Priority LOW 24
A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324.