Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: PandaXGO Component: Pandax Clear all filters
TI-2024-02384 CVE-2024-2564 · GHSA-f5gv-m2h2-fpc6

PandaXGO PandaX user.go ExportUser path traversal

Priority HIGH 65

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00507 Published 2024-03-17 No fix listed CWE-24
TI-2024-02383 CVE-2024-2563 · GHSA-3rxx-hfrv-77fv

PandaXGO PandaX upload.go DeleteImage path traversal

Priority HIGH 75

A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2024-03-17 No fix listed CWE-24
TI-2024-02382 CVE-2024-2562 · GHSA-f3qg-4gp2-rr72

PandaXGO PandaX role_menu.go InsertRole sql injection

Priority HIGH 75

A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-03-17 No fix listed CWE-89