Lucene search
+L

5 matches found

NVD
NVD
•added 2026/09/13 10:16 a.m.•20 views

CVE-2026-90509

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

7.5CVSS0.005EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/13 10:00 a.m.•10 views

CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.3AI score
SaveExploits0References9
EUVD
EUVD
•added 2026/09/13 10:00 a.m.•13 views

EUVD-2026-76982

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 10:00 a.m.•48 views

CVE-2026-90509 dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials

A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made...

7.5CVSS0.005EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/13 12:00 a.m.•23 views

PT-2026-90828

Name of the Vulnerable Software and Affected Versions dromara orion-visor versions prior to 2.5.8 Description A remote manipulation of the ExposeApiAspect.beforeExposeApi function within the ExposeApiAspect.java file can lead to the exposure of hard-coded credentials. Recommendations At the momen...

7.5CVSS7.1AI score0.005EPSS
SaveExploits0References13
Rows per page
Query Builder