CVE-2024-54851

CVE-2024-54851 affects Teedy up to version 1.12, where CSRF protection is lacking, enabling CSRF attacks as described in multiple sources (CVSSv3.1: 8.8, HIGH). The vulnerability concerns the web UI flow and request handling, with no explicit exploitation details in the provided documents. Red Ha...

Teedy 安全漏洞

Teedy is an open source, lightweight document management system for individuals and businesses open-sourced by Teedy France. A security vulnerability exists in Teedy versions 1.9 through 1.12, which stems from improper cleanup of user input and allows an unauthenticated attacker to perform variou...

CVE-2024-54851

Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

PT-2025-4751 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy versions 1.11 and earlier Description: The issue allows for CSRF, enabling account takeover via POST "/api/user/admin". This can be exploited to gain unauthorized access to user accounts. Recommendations: For versions 1.11 and earlier, ...

Teedy 安全漏洞

Teedy is a French Teedy open source open source, lightweight document management system for individuals and businesses. A security vulnerability exists in Teedy 1.11 and earlier versions, which stems from vulnerability to cross-site request forgery CSRF attacks, which can be realized through the...

CVE-2025-22963

CVE-2025-22963 affects Teedy up to version 1.11. The issue is a CSRF vulnerability that permits account takeover via POST /api/user/admin. Several connected sources confirm the affected software and the vulnerable endpoint, with Red Hat/Redundant feeds and PT-2025-4751 noting a workaround (restri...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

Teedy 安全漏洞

Teedy is an open source, lightweight document management system for individuals and businesses from Teedy Open Source in France. A security vulnerability exists in Teedy version 1.11, which stems from vulnerability to cross-site scripting XSS attacks via the administration console...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Multiple sources describe an XSS issue that could lead to an account takeover (Exploits: stored XSS, including a demonstrated account takeover vector). The Red Hat and CVE records confirm the vulnerability; PT-2024...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

PT-2024-31944 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy version 1.11 Description: The issue is related to Cross Site Scripting XSS via the management console. This allows for potential account takeover. Recommendations: For Teedy version 1.11, as a temporary workaround, consider restricting...

CVE-2023-4892

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

Design/Logic Flaw

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

CVE-2023-4892 Teedy v1.11 - Stored cross-site scripting (XSS)

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...