TI-2024-02385 CVE-2024-2565 · GHSA-q7g9-6pv9-v3vp
PandaXGO PandaX File Extension upload.go unrestricted upload
Priority HIGH 75
A vulnerability was found in PandaXGO PandaX up to 20240310.
PandaXGO
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
PandaXGO records in CISA KEVNo PandaXGO vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-02383 CVE-2024-2563 · GHSA-3rxx-hfrv-77fv
PandaXGO PandaX upload.go DeleteImage path traversal
Priority HIGH 75
A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical.
TI-2024-02382 CVE-2024-2562 · GHSA-f3qg-4gp2-rr72
PandaXGO PandaX role_menu.go InsertRole sql injection
Priority HIGH 75
A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310.
TI-2024-02384 CVE-2024-2564 · GHSA-f5gv-m2h2-fpc6
PandaXGO PandaX user.go ExportUser path traversal
Priority HIGH 65
A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical.
TI-2025-13786 CVE-2025-15108 · GHSA-hj3q-q387-m5hr
PandaXGO PandaX JWT Secret config.yml hard-coded key
Priority MEDIUM 61
A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5.