Priority LOW 31
The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00207 · Published 2026-06-05 · No fix listed CWE-639
Priority LOW 23
A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-06-05 · Fixed in 1.4.8.6 CWE-918
Priority LOW 37
An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00414 · Published 2026-06-05 · Fixed in 1.4.8.6 CWE-287
Priority LOW 37
The linqi application contains hardcoded cryptographic keys.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00073 · Published 2026-06-05 · No fix listed CWE-321
Priority MEDIUM 51
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2024-05-14 · No fix listed CWE-90
Priority LOW 21
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1MEDIUM 4.8· Local · High privileges · User interaction · EPSS 0.00217 · Published 2024-05-14 · No fix listed CWE-259
Priority LOW 25
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.0041 · Published 2024-05-14 · No fix listed CWE-79
Priority MEDIUM 40
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00659 · Published 2024-05-14 · No fix listed CWE-200
Priority LOW 29
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.00454 · Published 2024-05-14 · No fix listed CWE-918
Priority MEDIUM 50
An issue was discovered in linqi before 1.4.0.1 on Windows.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00605 · Published 2024-05-14 · No fix listed CWE-98
THREATIST.IORead the docs