TI-2024-37819 CVE-2024-57190 · GHSA-7rhv-xm4q-wh42
Erxes <1.6.1 is vulnerable to Incorrect Access Control.
Priority MEDIUM 50
Erxes <1.6.1 is vulnerable to Incorrect Access Control.
Vulnerabilities
4 records
TI-2024-37818 CVE-2024-57189 · GHSA-2977-5php-6789
In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system…
Priority LOW 25
In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.
TI-2024-37817 CVE-2024-57186 · GHSA-rq9r-qvwg-829q
In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system…
Priority LOW 25
In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.
TI-2021-12518 CVE-2021-32853 · GHSA-g9ph-r9hc-34r8
Erxes vulnerable to Cross-site Scripting
Priority HIGH 74
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior.