72 matches found
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33863
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33868
CVE-2024-33868 affects linqi prior to 1.4.0.1 on Windows. The issue is an LDAP injection in the application’s processing. The vulnerability has a high impact risk per the NVD score (CRITICAL: 9.8) with network attack vector, no authentication, and full impact on confidentiality, integrity, and av...
CVE-2024-33868
An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...
CVE-2024-33867
An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33866
Linqi prior to 1.4.0.1 on Windows contains a cross‑site scripting vulnerability in the /api/DocumentTemplate/{GUID} API endpoint. The issue affects versions before 1.4.0.1 and could allow execution of injected scripts when authenticated users interact with the endpoint. The recommended remediatio...
CVE-2024-33866
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...
CVE-2024-33865
An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...
CVE-2024-33865
CVE-2024-33865 affects linqi prior to 1.4.0.1 on Windows, where an NTLM hash leak can occur via the endpoints /api/Cdn/GetFile and /api/DocumentTemplate/{GUID]. Multiple connected sources corroborate the issue and specify that upgrading to version 1.4.0.1 or later resolves the vulnerability. A pr...
CVE-2024-33864
The CVE-2024-33864 entry covers a vulnerability in linqi prior to 1.4.0.1 on Windows that enables SSRF via Document template generation, including the use of remote images during process creation, file inclusion, and PDF document generation through malicious JavaScript. Affected component behavio...
CVE-2024-33864
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...
CVE-2024-33863
The CVE-2024-33863 issue affects linqi prior to 1.4.0.1 on Windows, with a local file inclusion vulnerability exposed via the /api/Cdn/GetFile endpoint. The root cause is not explicitly stated in the provided documents, but the impact is high (CVE metrics indicate Confidentiality, Integrity, and ...
CVE-2024-33863
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...
linqi 安全漏洞
linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1 that stems from the presence of a local file inclusion issue...
linqi 安全漏洞
linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1, which stems from the presence of hard-coded passwords...
PT-2024-25519 · Linqi · Linqi
Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue in linqi allows for Server-Side Request Forgery SSRF via Document template generation. This can be achieved through remote images in process creation, file inclusion, and PDF document...