CVE-2024-33866

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33864

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...

CVE-2024-33867

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868

An LDAP injection vulnerability exists in the linqi process digitization program on Windows for versions prior to 1.4.0.1 . The flaw arises from the improper neutralization of special elements used in LDAP queries, which can lead to unauthorized data access or manipulation. To resolve this issue,...

CVE-2024-33867

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...

CVE-2024-33866

A cross-site scripting (XSS) vulnerability exists in the linqi process digitization program on Windows for versions prior to 1.4.0.1 . The flaw is located in the /api/DocumentTemplate/{GUID} API endpoint. This vulnerability allows for the improper neutralization of input during web page generatio...

CVE-2024-33866

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...

CVE-2024-33866

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/GUID XSS...

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...

CVE-2024-33865

A security vulnerability exists in linqi (a process digitization program) versions prior to 1.4.0.1 on Windows. The issue involves an NTLM hash leak occurring through the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID} endpoints. To resolve this issue, users should update to version 1.4.0.1 or ...

CVE-2024-33864

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...

CVE-2024-33864

The linqi process digitization program (versions prior to 1.4.0.1 ) on Windows is vulnerable to Server-Side Request Forgery (SSRF) . This flaw exists in the Document template generation feature, specifically triggered by remote images in process creation, file inclusion, and PDF document generati...

CVE-2024-33863

The linqi process digitization program for Windows (versions prior to 1.4.0.1 ) is vulnerable to a local file inclusion (LFI) issue. The vulnerability exists within the /api/Cdn/GetFile API endpoint, which allows for improper control of filenames. This flaw could potentially lead to unauthorized ...

CVE-2024-33863

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...

linqi 安全漏洞

linqi is a process digitization program from linqi, Inc. A security vulnerability exists in linqi versions prior to 1.4.0.1, which stems from the presence of hard-coded passwords...

PT-2024-25521 · Linqi · Linqi

Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in linqi, where there is a potential XSS vulnerability in the "/api/DocumentTemplate/GUID" API endpoint. Recommendations: For versions prior to 1.4.0.1, update to version...