CVE-2024-33863
- EPSS 0.46%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:33:47
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.
CVE-2024-33864
- EPSS 0.12%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:34:24
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript.
CVE-2024-33865
- EPSS 0.32%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:34:11
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.
CVE-2024-33866
- EPSS 0.35%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:34:54
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.
CVE-2024-33867
- EPSS 0.1%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:35:00
An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.
CVE-2024-33868
- EPSS 0.39%
- Veröffentlicht 14.05.2024 16:17:22
- Zuletzt bearbeitet 28.04.2025 17:35:05
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.