TI-2026-02178 CVE-2026-2552 · GHSA-m22r-r587-48f7
ZenTao Editor control.php delete path traversal
Priority MEDIUM 56
A vulnerability was identified in ZenTao up to 21.7.8.
Vulnerabilities
9 records
TI-2026-02177 CVE-2026-2551 · GHSA-8crw-7238-r6f8
ZenTao Backup control.php delete path traversal
Priority MEDIUM 57
A vulnerability was determined in ZenTao up to 21.7.8.
TI-2026-01551 CVE-2026-1884 · GHSA-rxcq-q6q7-hm9r
ZenTao Webhook model.php fetchHook server-side request forgery
Priority MEDIUM 56
A weakness has been identified in ZenTao up to 21.7.6-85642.
TI-2025-12604 CVE-2025-13789 · GHSA-px5m-vp2j-j7xw
ZenTao model.php makeRequest server-side request forgery
Priority MEDIUM 57
A vulnerability was found in ZenTao up to 21.7.6-8564.
TI-2025-12602 CVE-2025-13787 · GHSA-v63q-x4cm-x632
ZenTao File control.php delete privileges management
Priority MEDIUM 57
A flaw has been found in ZenTao up to 21.7.6-8564.
TI-2023-24966 CVE-2023-46376 · GHSA-6pvg-63w9-jhx6
Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.
Priority HIGH 72
Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.
TI-2023-24965 CVE-2023-46375 · GHSA-3pmr-9m67-9h7q
ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).
Priority HIGH 73
ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).
TI-2023-25032 CVE-2023-46491 · GHSA-xpmf-rjrc-7rc4
ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.
Priority MEDIUM 60
ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.
TI-2023-24964 CVE-2023-46374 · GHSA-7j46-2fmc-fw7w
ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).
Priority MEDIUM 60
ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).