Linkace

Linkace

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-27458

Exploit
  • EPSS 0.04%
  • Veröffentlicht 21.02.2026 06:54:41
  • Zuletzt bearbeitet 24.02.2026 15:03:33

LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting vulnerability through the Atom feed endpoint for lists (/lists/feed). An authenticated user can inject a CDATA-breaking payload int...

5.4

CVE-2025-62722

Exploit
  • EPSS 0.05%
  • Veröffentlicht 04.11.2025 22:31:46
  • Zuletzt bearbeitet 25.11.2025 18:45:24

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, the social media sharing functionality contains a Stored Cross-Site Scripting (XSS) vulnerability that allows any authenticated user to inject arbitrary JavaScrip...

6.5

CVE-2025-62721

Exploit
  • EPSS 0.05%
  • Veröffentlicht 04.11.2025 22:07:09
  • Zuletzt bearbeitet 10.11.2025 19:56:06

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, l...

6.5

CVE-2025-62720

Exploit
  • EPSS 0.05%
  • Veröffentlicht 04.11.2025 22:03:09
  • Zuletzt bearbeitet 10.11.2025 19:57:02

LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owne...

4.3

CVE-2025-62719

Exploit
  • EPSS 0.05%
  • Veröffentlicht 04.11.2025 21:57:15
  • Zuletzt bearbeitet 10.11.2025 19:57:35

LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function in the FetchController class accepts user-provided URLs and makes HTTP requests to them without validating that the destination i...

7.3

CVE-2025-59424

Exploit
  • EPSS 0.04%
  • Veröffentlicht 18.09.2025 19:53:38
  • Zuletzt bearbeitet 06.10.2025 15:03:32

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting (XSS) vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is ren...

5.4

CVE-2025-53838

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.09.2025 19:18:17
  • Zuletzt bearbeitet 06.10.2025 15:02:15

LinkAce is a self-hosted archive to collect website links. A stored cross-site scripting (XSS) vulnerability was discovered in versions prior to 2.1.9 that allows an attacker to inject arbitrary JavaScript, which is then executed in the context of a ...

5.4

CVE-2024-56507

Exploit
  • EPSS 0.93%
  • Veröffentlicht 27.12.2024 16:15:25
  • Zuletzt bearbeitet 06.10.2025 15:04:22

LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting (XSS) vulnerability exists in the LinkAce. This issue occurs in the "URL" field of the "Edit Link" module, where user input...

7.6

CVE-2024-56508

Exploit
  • EPSS 0.35%
  • Veröffentlicht 27.12.2024 16:15:25
  • Zuletzt bearbeitet 06.10.2025 15:04:06

LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This issue occurs in the "Import Bookmarks" functionality, where malicious HTML files can be uploaded con...