Linqi

Linqi

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2026-11369

  • EPSS 0.21%
  • Veröffentlicht 05.06.2026 12:37:46
  • Zuletzt bearbeitet 05.06.2026 16:07:31

The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId. This Insecure Direct Object Refe...

5.3

CVE-2026-11346

  • EPSS 0.23%
  • Veröffentlicht 05.06.2026 11:31:06
  • Zuletzt bearbeitet 05.06.2026 16:07:31

A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker...

6.9

CVE-2026-11345

  • EPSS 0.41%
  • Veröffentlicht 05.06.2026 11:29:52
  • Zuletzt bearbeitet 05.06.2026 16:07:31

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorrectly grants access if an 'AnonFile' query parameter...

8.5

CVE-2026-11347

  • EPSS 0.07%
  • Veröffentlicht 05.06.2026 10:18:35
  • Zuletzt bearbeitet 05.06.2026 16:07:31

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for AES/CBC encryption, making known-plaintext attacks ...

9.8

CVE-2024-33863

  • EPSS 0.61%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:33:47

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.

5.9

CVE-2024-33864

  • EPSS 0.45%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:34:24

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.

7.5

CVE-2024-33865

  • EPSS 0.66%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:34:11

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.

5.5

CVE-2024-33866

  • EPSS 0.41%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:34:54

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.

4.8

CVE-2024-33867

  • EPSS 0.22%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:35:00

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.

9.8

CVE-2024-33868

  • EPSS 0.9%
  • Veröffentlicht 14.05.2024 16:17:22
  • Zuletzt bearbeitet 28.04.2025 17:35:05

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.