Vulnerabilities

TI-2026-15460 CVE-2026-18903 · GHSA-mfcv-f6vv-6h4c

yeqifu warehouse FileController.java path traversal

MEDIUM 57

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00517 Published 2026-08-05 No fix listed CWE-22

TI-2026-02448 CVE-2026-2852 · GHSA-86qm-25mg-cp7q

yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control

MEDIUM 57

A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00255 Published 2026-02-20 No fix listed CWE-266

TI-2026-02447 CVE-2026-2851 · GHSA-gv8w-m9x9-cvqj

yeqifu warehouse Inport Endpoint InportController.java deleteInport access control

MEDIUM 57

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00231 Published 2026-02-20 No fix listed CWE-266

TI-2026-02446 CVE-2026-2850 · GHSA-gj5f-4c2g-54hq

yeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control

MEDIUM 57

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00235 Published 2026-02-20 No fix listed CWE-266

TI-2026-02445 CVE-2026-2849 · GHSA-ww4h-gqqf-68h9

yeqifu warehouse Cache Sync CacheController.java syncCache access control

MEDIUM 57

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00256 Published 2026-02-20 No fix listed CWE-266

TI-2026-01760 CVE-2026-2107 · GHSA-v4hg-963f-jrvj

yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization

MEDIUM 57

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00361 Published 2026-02-07 No fix listed CWE-266

TI-2026-01759 CVE-2026-2106 · GHSA-2xw4-xhqf-2x5p

yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

MEDIUM 57

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00361 Published 2026-02-07 No fix listed CWE-266

TI-2026-01758 CVE-2026-2105 · GHSA-vgj5-9p6r-986x

yeqifu warehouse Department Management DeptController.java deleteDept improper authorization

MEDIUM 57

A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00328 Published 2026-02-07 No fix listed CWE-266

TI-2026-01734 CVE-2026-2079 · GHSA-r823-3c8q-vv84

yeqifu warehouse Menu Management MenuController.java deleteMenu improper authorization

MEDIUM 57

A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2026-02-07 No fix listed CWE-266

TI-2026-01733 CVE-2026-2078 · GHSA-jpfg-xqcg-wg8p

yeqifu warehouse Permission Management PermissionController.java deletePermission improper authorization

MEDIUM 57

A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2026-02-07 No fix listed CWE-266

TI-2026-01732 CVE-2026-2077 · GHSA-88w4-2phc-29cp

yeqifu warehouse Role Management RoleController.java deleteRole improper authorization

MEDIUM 57

A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2026-02-07 No fix listed CWE-266

TI-2026-01731 CVE-2026-2076 · GHSA-57g4-crph-5qv5

yeqifu warehouse User Management Endpoint UserController.java deleteUser improper authorization

MEDIUM 57

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2026-02-07 No fix listed CWE-266

TI-2026-01730 CVE-2026-2075 · GHSA-w9hx-x484-j26w

yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control

MEDIUM 57

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2026-02-07 No fix listed CWE-266

TI-2026-00375 CVE-2026-0574 · GHSA-p3fv-jq23-qg6f

yeqifu warehouse Request UserController.java saveUserRole improper authorization

MEDIUM 57

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00349 Published 2026-01-04 No fix listed CWE-266

TI-2026-00372 CVE-2026-0571 · GHSA-28rq-cfhw-3x7j

yeqifu warehouse AppFileUtils.java createResponseEntity path traversal

MEDIUM 57

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00526 Published 2026-01-02 No fix listed CWE-22

TI-2025-14075 CVE-2025-15432 · GHSA-c9rh-2qq3-frxv

yeqifu carRental com.yeqifu.sys.controller.FileController downloadShowFile.action downloadShowFile path traversal

HIGH 70

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00696 Published 2026-01-02 No fix listed CWE-22

TI-2025-40493 CVE-2025-65879 · GHSA-479c-6w78-7qfg

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion…

HIGH 68

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00849 Published 2025-12-05 No fix listed CWE-22

TI-2025-40492 CVE-2025-65878 · GHSA-77x3-723g-rr6j

The warehouse management system version 1.2 contains an arbitrary file read vulnerability.

HIGH 72

The warehouse management system version 1.2 contains an arbitrary file read vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00746 Published 2025-12-05 No fix listed CWE-22

TI-2025-08842 CVE-2025-9650 · GHSA-vf7c-4vfx-2rgf

yeqifu carRental AppFileUtils.java removeFileByPath path traversal

MEDIUM 57

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00417 Published 2025-08-29 No fix listed CWE-22

TI-2025-08534 CVE-2025-9310 · GHSA-wp6w-6rq3-hxmq

yeqifu carRental Druid login.html hard-coded credentials

HIGH 70

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00596 Published 2025-08-21 No fix listed CWE-259

Vulnerabilities

Filters