Vulnerabilities

TI-2024-16963 CVE-2024-25833 · GHSA-8mv9-w6jc-hxmg

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow…

HIGH 82

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated malicious actor to execute arbitrary SQL queries in database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02831 Published 2024-02-28 No fix listed CWE-89

TI-2024-16962 CVE-2024-25832 · GHSA-3x46-c2g7-344x

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an…

MEDIUM 52

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12825 Published 2024-02-28 No fix listed CWE-434

TI-2024-16961 CVE-2024-25831 · GHSA-gw2f-jv86-5xc3

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS)…

MEDIUM 60

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00551 Published 2024-02-28 No fix listed CWE-79

Vulnerabilities

Filters

F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow…

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an…

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS)…