CVE-2026-52474

An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...

CVE-2026-52476

SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...

CVE-2026-52475

Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...

CVE-2026-52474

The vulnerability CVE-2026-52474 affects the aiflowy package (versions

CVE-2026-52476

CVE-2026-52476 affects aiflowy up to version 2.1.2. The vulnerability is a SQL Injection in getPageData (DatacenterQuery.java), enabling a remote attacker to obtain sensitive information. Documents consistently identify the flaw, but do not provide remediation details or exploit code. No explicit...

CVE-2026-52476

SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...

CVE-2026-52475

Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...

CVE-2026-52474

An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...

CVE-2026-52475

Cross Site Scripting vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file...