Lucene search
+L

39 matches found

EUVD
EUVD
added 2026/03/08 6:30 p.m.21 views

EUVD-2026-10251

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS6.2AI score0.00482EPSS
SaveExploits1References10
EUVD
EUVD
added 2026/03/08 6:30 p.m.15 views

EUVD-2026-10252

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS6.2AI score0.00422EPSS
SaveExploits1References10
NVD
NVD
added 2026/03/08 4:16 p.m.17 views

CVE-2026-3748

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

8.8CVSS0.00482EPSS
SaveExploits1References9
NVD
NVD
added 2026/03/08 4:16 p.m.15 views

CVE-2026-3749

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

8.8CVSS0.00422EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2026/03/08 4:02 p.m.46 views

CVE-2026-3749 Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS0.00422EPSS
SaveExploits1References9
OSV
OSV
added 2026/03/08 4:02 p.m.12 views

CVE-2026-3749 Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

5.3CVSS6.1AI score
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/03/08 4:02 p.m.10 views

CVE-2026-3749

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS5.4AI score0.00422EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2026/03/08 4:02 p.m.6 views

CVE-2026-3749 Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS5.4AI score0.00422EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2026/03/08 4:02 p.m.5 views

CVE-2026-3748 Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS5.4AI score0.00482EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2026/03/08 4:02 p.m.47 views

CVE-2026-3748 Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS0.00482EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2026/03/08 4:02 p.m.7 views

CVE-2026-3748

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS5.4AI score0.00482EPSS
SaveExploits1References9
CVE
CVE
added 2026/03/08 4:02 p.m.41 views

CVE-2026-3748

A CVE-2026-3748 vulnerability affects Bytedesk up to 1.3.9 in the SVG File Handler’s UploadRestController.uploadFile function. The flaw allows unrestricted file upload via manipulation of the uploadFile endpoint, with remote exploitation reported as possible and the exploit released publicly. A f...

8.8CVSS6.2AI score0.00482EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2026/03/08 4:02 p.m.15 views

CVE-2026-3748 Bytedesk SVG File UploadRestController.java uploadFile unrestricted upload

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

5.3CVSS6.1AI score
SaveExploits0References11
CNNVD
CNNVD
added 2026/03/08 12:00 a.m.14 views

Bytedesk 代码问题漏洞

Bytedesk is a multi-channel intelligent customer service platform developed by the individual developers of bytedesk.com. Versions of Bytedesk 1.3.9 and earlier have code vulnerabilities. These vulnerabilities stem from operations related to the uploadFile function in the UploadRestController.jav...

8.8CVSS6.7AI score0.00482EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/03/08 12:00 a.m.21 views

PT-2026-23988

Name of the Vulnerable Software and Affected Versions Bytedesk versions up to 1.3.9 Description A server-side request forgery condition exists in Bytedesk. The issue is located in the getModels function within the SpringAIOpenrouterRestController component, specifically in the file...

8.8CVSS6.4AI score0.0042EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
added 2026/03/08 12:00 a.m.18 views

PT-2026-23955

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS5.4AI score0.00422EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/03/08 12:00 a.m.18 views

PT-2026-23989

Name of the Vulnerable Software and Affected Versions Bytedesk versions up to 1.3.9 Description A server-side request forgery condition exists in the getModels function within the SpringAIGiteeRestController component of Bytedesk. Manipulation of the apiUrl argument can lead to server-side reques...

8.8CVSS6.5AI score0.00422EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2026/03/08 12:00 a.m.14 views

Bytedesk 代码问题漏洞

Bytedesk is a multi-channel intelligent customer service platform developed by the individual developers of bytedesk.com. Versions of Bytedesk 1.3.9 and earlier have code vulnerabilities. These vulnerabilities stem from operations on the handleFileUpload function in the UploadRestService.java fil...

8.8CVSS6.7AI score0.00422EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/03/08 12:00 a.m.21 views

PT-2026-23954

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS5.4AI score0.00482EPSS
SaveExploits1References10
Rows per page
Query Builder