Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: erupts Clear all filters
TI-2026-75289 CVE-2026-111390 · GHSA-qh8g-m9r5-r3mw

HQL injection in Erupt Data Table API lets users read other entities

Priority MEDIUM 60

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{e…

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00357 Published 2026-10-16 No fix listed CWE-564