| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required. |
| The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions. |
| Modals gallery paths could enumerate unintended directories. |
| Custom query URLs could access internal or reserved network services. |
| Administrator URL purges did not consistently require a valid token and cache-management permission. |
| The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens. |
| Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable. |
| ReReplacer XML include paths could read files outside the site directory. |
| GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass. |
| Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates. |
| Custom purge and log paths could escape the site webroot directory. |
| CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata. |
| Shortcut configuration accepted arbitrary inline JavaScript. |
| CDN credentials were exposed in administrator request URLs. |
| Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder. |
| MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability. |
| Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions. |
| An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.) version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal sequences to access files outside of the intended web root directory. This may allow disclosure of sensitive system files and configuration data |
| Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings. |
| Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs. |
