Roothub

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Roothub records in CISA KEV

No Roothub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Roothub 6 records MEDIUM

Records

6 records

TI-2025-07511 CVE-2025-8211 · GHSA-r48x-cv83-x3mq

Roothub SystemConfigAdminController.java edit cross site scripting

MEDIUM 56

A vulnerability was found in Roothub up to 2.6.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00448 Published 2025-07-26 No fix listed CWE-79

TI-2024-21946 CVE-2024-33120 · GHSA-3wvq-9p67-m439

Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the…

MEDIUM 50

Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2024-05-07 No fix listed CWE-434

TI-2024-21949 CVE-2024-33124 · GHSA-vxmv-r24r-j66w

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle…

MEDIUM 49

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00503 Published 2024-05-07 No fix listed CWE-89

TI-2022-10878 CVE-2022-28052 · GHSA-54v4-2rmr-fh34

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in…

MEDIUM 40

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which c…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.02529 Published 2022-04-13 No fix listed CWE-22

TI-2024-21948 CVE-2024-33122 · GHSA-63pv-p59f-jpr4

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.

LOW 28

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00339 Published 2024-05-07 No fix listed CWE-89

TI-2024-21947 CVE-2024-33121 · GHSA-jvfj-c7wv-mq45

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.

LOW 28

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00329 Published 2024-05-06 No fix listed CWE-89

Open these records in search →

Critical	2
High	1
Medium	3
Low	0
No CVSS	0